2. CWE-601 : URL Redirection to Untrusted Site ('Open Redirect')
3. CWE-829 : Inclusion of Functionality from Untrusted Control Sphere
40 Software Assurance Pocket Guide Series:
Development, Version 2.3, November 1, 2012