1146 matches found
GHSA-7MG4-W3W5-X5PC Prototype pollution in json-pointer
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
Open Redirect in werkzeug
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
GHSA-3P3H-QGHP-HVH2 Open Redirect in werkzeug
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
CVE-2021-3374
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash...
CVE-2021-3374
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash...
Directory traversal
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash...
CVE-2021-3374
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash...
CVE-2021-3374
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash...
Open Redirect
Overview trailing-slash is an Add or remove trailing slashes, and redirect. Affected versions of this package are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable cod...
Google Golang 安全漏洞
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. The archive/zip in Go is not working when attempting to use Reader.zip on zip archive files with filenames starting with . / begins with a ZIP archive file using the Reader.Open A...
GHSA-F4HQ-453J-P95F Open redirect in Slashify
The package is an Express middleware that normalises routes by stripping any final slash, redirecting, for example, bookings/latest/ to bookings/latest. However, it does not validate the path it redirects to in any way. In particular, if the path starts with two slashes or two backslashes, or a...
werkzeug redirect vulnerability
Werkzeug is a comprehensive library for WSGI web applications. werkzeug versions prior to 0.11.6 are vulnerable to redirection. An attacker could exploit the vulnerability to redirect users to an arbitrary url via a double slash in the URL...
CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
DEBIAN-CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
Open redirect
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
UBUNTU-CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...
