CVE-2021-23387

The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::createTrailing, as the web server uses relative URLs...

CVE-2021-23387: URL Redirection to Untrusted Site

The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::createTrailing, as the web server uses relative URLs...

PT-2021-15481

Name of the Vulnerable Software and Affected Versions trailing-slash versions prior to 2.0.1 Description The issue allows for Open Redirect attacks through the use of trailing double slashes in URLs when accessing vulnerable endpoints, such as "https://example.com//attacker.example/". The problem...