1 matches found
GHSA-J5QP-P44G-2M49 @asymmetric-effort/specifyjs: No redirect target validation in secureFetch
Finding Location: core/src/shared/secure-fetch.ts assertSecureUrl validated only the initial request URL. The fetch API follows redirects by default up to 20 hops. A request to a valid https:// URL could redirect to http://internal-service/ or other unvalidated destinations. Status Fixed in...
6.9CVSS5.8AI score
SaveExploits0References3
20