Lucene search
+L

1 matches found

OSV
OSV
added 2022/12/23 12:0 p.m.14 views

RUSTSEC-2022-0072 Location header incorporates user input, allowing open redirect

When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...

7AI score
SaveExploits0References3
Rows per page
Query Builder