Lucene search
K

CVE-2021-22963

🗓️ 14 Oct 2021 14:50:11Reported by hackeroneType 
cve
 cve
🔗 web.nvd.nist.gov👁 91 Views🌐 WEB

CVE-2021-22963: Redirect vulnerability in fastify-static modul

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2021-22963
14 Oct 202118:27
circl
CNNVD
Fastify-Static 输入验证错误漏洞
14 Oct 202100:00
cnnvd
Cvelist
CVE-2021-22963
14 Oct 202114:50
cvelist
EUVD
EUVD-2021-2234
7 Oct 202500:30
euvd
Github Security Blog
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
5 Oct 202120:24
github
Hacker One
Fastify: Open redirect in fastify-static via mishandled user's input when attempt to redirect
29 Sep 202103:57
hackerone
NVD
CVE-2021-22963
14 Oct 202115:15
nvd
OSV
GHSA-P6VG-P826-QP3V URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
5 Oct 202120:24
osv
Prion
Design/Logic Flaw
14 Oct 202115:15
prion
RedhatCVE
CVE-2021-22963
18 Oct 202115:05
redhatcve
Rows per page
NVD
Vulners
Node
[
  {
    "product": "https://github.com/fastify/fastify-static",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affects < v4.2.4. Fixed in >= v4.2.4"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
redirectquery param//google.com/%2e%2eOpen redirect via double slash in redirect option of fastify-static before 4.2.4, allowing redirection to arbitrary external sites when redirect: true is used.CWE-601

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:51Current
6Medium risk
Vulners AI Score6
CVSS 25.8
CVSS 3.16.1
EPSS0.00233
91