Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-22963
HistoryOct 14, 2021 - 3:15 p.m.

Design/Logic Flaw

2021-10-1415:15:00
PRIOn knowledge base
www.prio-n.com
2

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/...The issue shows up on all the fastify-static applications that set redirect: true option. By default, it is false.

CPENameOperatorVersion
fastify-staticlt4.2.4

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%