Lucene search
+L

119 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/21 12:00 a.m.14 views

The vulnerability of the RGW component of the Ceph storage system, which is related to insufficient validation of input data, allows a attacker to trigger a service failure.

The vulnerability of the RGW component of the Ceph storage system is related to incorrect processing of URL addresses that end with two slashes. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.3CVSS6.7AI score0.02425EPSS
SaveExploits0References10Affected Software4
RedhatCVE
RedhatCVE
added 2021/10/18 3:08 p.m.24 views

CVE-2021-22964

A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...

8.8CVSS3.3AI score0.01021EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2021/10/18 3:05 p.m.39 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.1CVSS4.1AI score0.01169EPSS
SaveExploits1References3
OSV
OSV
added 2021/10/14 3:15 p.m.18 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.1CVSS6.8AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/14 3:15 p.m.7 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.1CVSS6.8AI score0.01169EPSS
SaveExploits1References2
Prion
Prion
added 2021/10/14 3:15 p.m.21 views

Design/Logic Flaw

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

5.8CVSS6.3AI score0.01169EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/10/14 12:00 a.m.12 views

Fastify-Static 输入验证错误漏洞

Fastify-Static is a plugin. It is used to serve static files as soon as possible. A security vulnerability exists in versions of the fastify-static module prior to 4.2.4, which can be exploited by an attacker to redirect a user to an arbitrary website using a double slash followed by a domain...

6.1CVSS7.2AI score0.01169EPSS
SaveExploits1References3
OSV
OSV
added 2021/10/05 8:24 p.m.51 views

GHSA-P6VG-P826-QP3V URL Redirection to Untrusted Site ('Open Redirect') in fastify-static

Impact A redirect vulnerability in the fastify-static module allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e. The issue shows up on all the fastify-static applications that set...

6.1CVSS7.2AI score0.01169EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/04/20 4:30 p.m.71 views

Open Redirect in werkzeug

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.2AI score0.01681EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2021/04/20 4:30 p.m.9 views

GHSA-3P3H-QGHP-HVH2 Open Redirect in werkzeug

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.3AI score0.01681EPSS
SaveExploits1References6
CNVD
CNVD
added 2020/11/19 12:00 a.m.55 views

werkzeug redirect vulnerability

Werkzeug is a comprehensive library for WSGI web applications. werkzeug versions prior to 0.11.6 are vulnerable to redirection. An attacker could exploit the vulnerability to redirect users to an arbitrary url via a double slash in the URL...

6.1CVSS4.3AI score0.01681EPSS
SaveExploits1References1
NVD
NVD
added 2020/11/18 3:15 p.m.21 views

CVE-2020-28724

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.1AI score0.01681EPSS
SaveExploits1References3
OSV
OSV
added 2020/11/18 3:15 p.m.19 views

CVE-2020-28724

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.2AI score
SaveExploits0References3
OSV
OSV
added 2020/11/18 3:15 p.m.1 views

DEBIAN-CVE-2020-28724

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6AI score0.01681EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/18 3:15 p.m.27 views

Open redirect

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

5.8CVSS6.2AI score0.01681EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2020/11/18 3:15 p.m.6 views

UBUNTU-CVE-2020-28724

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.4AI score0.01681EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2020/11/18 3:15 p.m.30 views

CVE-2020-28724

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.3AI score0.01681EPSS
SaveExploits1References2
OSV
OSV
added 2020/11/18 3:15 p.m.5 views

PYSEC-2020-157

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.3AI score0.01681EPSS
SaveExploits1References4
PyPA
PyPA
added 2020/11/18 3:15 p.m.7 views

PYSEC-2020-157

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.1CVSS6.9AI score0.01681EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2020/11/18 2:26 p.m.38 views

CVE-2020-28724

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

6.2AI score0.01681EPSS
SaveExploits1References3
Rows per page
Query Builder