Lucene search
+L

1 matches found

OSV
OSV
added 2021/09/13 8:5 p.m.39 views

GHSA-4HPQ-RJCX-7VJ9 Clearance Gem Open Redirect Vulnerability

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session:returnto. If the value used for returnto contains multiple leading slashes /////example.com the user ends up being redirected to the external domain that comes after...

7.6CVSS6.6AI score0.00697EPSS
SaveExploits0References6
Rows per page
Query Builder