Lucene search
GoogleOSV:CVE-2021-43812HistoryDec 16, 2021 - 7:15 p.m.
CVE-2021-43812
2021-12-1619:15:08
Google
osv.dev
7
auth0 next.js sdk
open redirect vulnerability
versions before 1.6.2
user authentication
next.js applications
upgrade
open redirect
vulnerability
login url
EPSS
0.001
Percentile
30.0%
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before 1.6.2 do not filter out certain returnTo parameter values from the login url, which expose the application to an open redirect vulnerability. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.
Related
cvelist
cvelist
CVE-2021-43812 Open redirect in nextjs-auth0
2021-12-16 18:20:12
gitlab
gitlab
URL Redirection to Untrusted Site ('Open Redirect')
2021-12-16 00:00:00
osv
osv
Open redirect in @auth0/nextjs-auth0
2021-12-16 18:52:21
prion
prion
Open redirect
2021-12-16 19:15:00
nvd
nvd
CVE-2021-43812
2021-12-16 19:15:08
veracode
veracode
Open Redirection
2021-12-17 03:13:57
github
github
Open redirect in @auth0/nextjs-auth0
2021-12-16 18:52:21
cve
cve
CVE-2021-43812
2021-12-16 19:15:08