Lucene search

@keystone-6/auth Open Redirect vulnerability

🗓️ 14 Jun 2023 14:06:54Reported by GitHub Advisory DatabaseType

Open redirect vulnerability in @keystone-6/auth package. Bypasses leading "/" filter, redirecting users to unexpected locations

Reporter	Title	Published	Views	Family All 24
OSV	@keystone-6/auth Open Redirect vulnerability	14 Jun 202314:54	–	osv
OSV	CVE-2023-34247	13 Jun 202317:15	–	osv
OSV	Open Redirect in microweber	30 Jun 202200:00	–	osv
OSV	CVE-2022-2252	29 Jun 202216:15	–	osv
OSV	CVE-2023-0748	8 Feb 202315:15	–	osv
Veracode	Open Redirect	16 Jun 202304:39	–	veracode
Veracode	Open Redirect	30 Jun 202205:24	–	veracode
CVE	CVE-2023-34247	13 Jun 202317:15	–	cve
CVE	CVE-2022-2252	29 Jun 202216:15	–	cve
CVE	CVE-2023-0748	8 Feb 202315:15	–	cve

Vulners

Node

keystone-6 authRange<7.0.0

Source	Link
github	www.github.com/keystonejs/keystone/security/advisories/GHSA-jqxr-vjvv-899m
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-34247
github	www.github.com/keystonejs/keystone/pull/8626
github	www.github.com/advisories/GHSA-jqxr-vjvv-899m

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Jun 2023 14:54Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.001

CWE-601