CVE-2021-23495

2022-02-2520:15:08

Google

osv.dev

0.001 Low

EPSS

Percentile

31.0%

JSON

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.

CPENameOperatorVersion
karmaeq0.13.0-rc.7
karmaeq0.0.6
karmaeq0.11.3
karmaeq0.12.16
karmaeq0.12.26
karmaeq0.13.20
karmaeq5.0.5
karmaeq5.0.7
karmaeq6.0.2
karmaeq2.0.5

Name	Operator	Version
karma	eq	0.13.0-rc.7
karma	eq	0.0.6
karma	eq	0.11.3
karma	eq	0.12.16
karma	eq	0.12.26
karma	eq	0.13.20
karma	eq	5.0.5
karma	eq	5.0.7
karma	eq	6.0.2
karma	eq	2.0.5

Rows per page:

1-10 of 2141

References

github.com/karma-runner/karma/commit/ff7edbb2ffbcdd69761bece86b7dc1ef0740508d

snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2412347

snyk.io/vuln/SNYK-JS-KARMA-2396325

0.001 Low

EPSS

Percentile

31.0%

JSON

Related for OSV:CVE-2021-23495