Lucene search

K
friendsofphpOpenJS FoundationFRIENDSOFPHP:RUDLOFF
HistoryFeb 20, 2022 - 1:28 p.m.

URL Redirection to Untrusted Site ('Open Redirect')

2022-02-2013:28:57
OpenJS Foundation
github.com
29
url redirection
open redirect
vulnerability
patch
external domain

EPSS

0.001

Percentile

43.5%

Description Impact Releases prior to 3.0.1 are vulnerable to an open redirect vulnerability that allows an attacker to construct a URL that redirects to an arbitrary external domain. Patches 3.0.1 contains a fix for this vulnerability. (The 1.x and 2.x releases are not maintained anymore.) References bc14b6e https://huntr.dev/bounties/4fb39400-e08b-47af-8c1f-5093c9a51203/ https://nvd.nist.gov/vuln/detail/CVE-2022-0692

EPSS

0.001

Percentile

43.5%