119 matches found
The vulnerability of the RGW component of the Ceph storage system, which is related to insufficient validation of input data, allows a attacker to trigger a service failure.
The vulnerability of the RGW component of the Ceph storage system is related to incorrect processing of URL addresses that end with two slashes. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
CVE-2021-22964
A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...
CVE-2021-22963
A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...
CVE-2021-22963
A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...
CVE-2021-22963
A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...
Design/Logic Flaw
A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...
Fastify-Static 输入验证错误漏洞
Fastify-Static is a plugin. It is used to serve static files as soon as possible. A security vulnerability exists in versions of the fastify-static module prior to 4.2.4, which can be exploited by an attacker to redirect a user to an arbitrary website using a double slash followed by a domain...
GHSA-P6VG-P826-QP3V URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
Impact A redirect vulnerability in the fastify-static module allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e. The issue shows up on all the fastify-static applications that set...
Open Redirect in werkzeug
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
GHSA-3P3H-QGHP-HVH2 Open Redirect in werkzeug
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
werkzeug redirect vulnerability
Werkzeug is a comprehensive library for WSGI web applications. werkzeug versions prior to 0.11.6 are vulnerable to redirection. An attacker could exploit the vulnerability to redirect users to an arbitrary url via a double slash in the URL...
CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
DEBIAN-CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
Open redirect
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
UBUNTU-CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
PYSEC-2020-157
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...