GHSA-jj78-5fmv-mv28

Опубликовано: 03 окт. 2024

Источник: github

Github: Прошло ревью

CVSS4: 2.1

CVSS3: 4.7

Описание

Express Open Redirect vulnerability

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0-rc1.

Ссылки

Пакеты

Наименование

express

npm

Затронутые версииВерсия исправления

>= 3.4.5, < 4.0.0-rc1

4.0.0-rc1

EPSS

Процентиль: 26%

0.00092

Низкий

2.1 Low

CVSS4

4.7 Medium

CVSS3

CVE ID

CVE-2024-9266

Дефекты

CWE-601

Связанные уязвимости

CVE-2024-9266

CVSS3: 4.7

ubuntu

около 1 года назад

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0.

CVE-2024-9266

CVSS3: 6.1

redhat

около 1 года назад

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0.

CVE-2024-9266

CVSS3: 4.7

nvd

около 1 года назад

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0.

CVE-2024-9266

CVSS3: 4.7

debian

около 1 года назад

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in E ...

EPSS

Процентиль: 26%

0.00092

Низкий

2.1 Low

CVSS4

4.7 Medium

CVSS3

CVE ID

CVE-2024-9266

Дефекты

CWE-601