Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-18007
HistoryMar 01, 2022 - 12:00 a.m.

karma input validation error vulnerability

2022-03-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

31.0%

karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. karma versions prior to 6.3.16 have a security vulnerability that stems from a lack of validation of returned url query parameters, which could be exploited to perform redirect attacks.

CPENameOperatorVersion
karma karmalt6.3.16

0.001 Low

EPSS

Percentile

31.0%