5 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-9266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impact...
20231122-npm (1.0.0), 3vot-salesforce-proxy (>=0.0.1, <=0.1.6) +2012 more potentially affected by CVE-2024-9266 via express (>=3.4.5, <=3.21.2)
express NPM version =3.4.5, =0.0.1, =2.0.0, =0.25.0, =1.0.4, =0.4.5-rc.0, =0.0.1, =0.12.0-edge9, =1.1.1, =1.0.2, =7.0.0, =1.0.0, =1.0.9 and more Source cves: CVE-2024-9266 Source advisory: OSV:GHSA-JJ78-5FMV-MV28...
CVE-2024-9266
A flaw was found in the Express package for Node.js. Certain versions are vulnerable to an open redirect attack, a URL redirection to an untrusted site, via the Express 3 Response object. This flaw may allow a user to be redirected to an untrusted page containing malware, which may compromise the...
CVE-2024-9266
CVE-2024-9266 : Open Redirect vulnerability in Express (3.4.5 <= version
CVE-2024-9266 Open Redirect
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0...