CVE-2021-32721

CVE-2021-32721 affects PowerMux, a drop-in replacement for Go’s http.ServeMux. Versions prior to 1.1.1 allow open redirects via the trailing slash redirection feature, enabling phishing-friendly links that may redirect users to untrusted sites. The issue is resolved in v1.1.1. No workarounds are ...

CVE-2021-32721 URL Redirection to Untrusted Site ('Open Redirect') in github.com/AndrewBurian/powermux

PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to craft phishing links and other open redirects by exploiting the trailing slash redirection feature. This may lead to users being redirected to untrusted sites after following an...