1 matches found
CVE-2021-23387: URL Redirection to Untrusted Site
The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::createTrailing, as the web server uses relative URLs...
6.1CVSS5.8AI score0.0115EPSS
SaveExploits1References2
20