Insecure Redirect

2021-06-2310:03:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

unsafe return

apirouter

sanitization

software

EPSS

0.002

Percentile

58.3%

JSON

github.com/gitpod-io/gitpod has Insecure Redirect. The vulnerability exists due to an unsafe return to function apiRouter without proper sanitization.

References

github.com/gitpod-io/gitpod/blob/main/CHANGELOG.md

github.com/gitpod-io/gitpod/commit/8ca431f86ae3a6f9a17afcfed51cdd065fcff1a5

github.com/gitpod-io/gitpod/compare/0.6.0-beta5...0.6.0

github.com/gitpod-io/gitpod/pull/2879

github.com/gitpod-io/gitpod/pull/2879#issuecomment-865662372

github.com/gitpod-io/gitpod/pull/4567

github.com/gitpod-io/gitpod/pull/4567/commits/f78b7d18e509e28e71b65bbd4dfd52c16ca57c18

www.gitpod.io/changelog

EPSS

0.002

Percentile

58.3%

JSON

Related for VERACODE:31037