11 matches found
WS-2022-0434
When "hyper-staticfile" performs a redirect for a directory request e.g. a request for "/dir" that redirects to "/dir/", the "Location" header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs...
6.1CVSS5.8AI score
SaveExploits0References5
20