CVE-2021-22963

creationtimestamp| type| source ---|---|--- 2021-10-14 18:27:45+00:00| seen| https://t.me/cibsecurity/30567...

@acot/acot-config (>=0.0.4-canary.1, <=0.0.8), @acot/acot-preset-axe (>=0.0.4-canary.1, <=0.0.8) +252 more potentially affected by CVE-2021-22963 via fastify-static (>=0.3.0, <=4.2.3)

fastify-static NPM version =0.3.0, =0.0.4-canary.1, =0.0.4-canary.1, =0.0.4-canary.1, =0.0.4-canary.1, =0.0.4-canary.1, =1.1.0, =1.0.0-pre.8, =1.0.1, =1.0.0-beta.1, =0.1.1-alpha.1, =0.1.0, =0.1.0, =1.0.0, =1.10.0 and more Source cves: CVE-2021-22963 Source advisory: MEND:CVE-2021-22963...

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

CVE-2021-22963

CVE-2021-22963 describes a redirect vulnerability in the fastify-static module (versions before 4.2.4). When applications enable redirect: true, an attacker can trick users into visiting arbitrary sites by using a double slash followed by a domain (e.g., //domain). The issue affects fastify-stati...

@cromwell/admin-panel (>=1.1.3, <=2.1.8), @cromwell/cms (>=1.1.7, <=2.1.12) +5 more potentially affected by CVE-2021-22963 via fastify-static (>=4.0.1, <=4.2.3)

fastify-static NPM version =4.0.1, =1.1.3, =1.1.7, =1.31.0, =1.39.28, =4.41.2-test.1, =3.4.0, =3.6.0-beta.3 Source cves: CVE-2021-22963 Source advisory: OSV:GHSA-P6VG-P826-QP3V...