Open redirect

A redirect target taken from user input without validation, letting an attacker use your trusted domain as the first hop of a phishing chain. It is also the classic way to leak a token in a fragment or a referrer to a destination you did not intend. The fix is an allowlist, or accepting only paths and rejecting anything with a scheme or a host.