Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/02 7:8 p.m.6 views

GHSA-J5QP-P44G-2M49 @asymmetric-effort/specifyjs: No redirect target validation in secureFetch

Finding Location: core/src/shared/secure-fetch.ts assertSecureUrl validated only the initial request URL. The fetch API follows redirects by default up to 20 hops. A request to a valid https:// URL could redirect to http://internal-service/ or other unvalidated destinations. Status Fixed in...

6.9CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder