Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34967
HistoryApr 05, 2022 - 4:32 a.m.

Open Redirects

2022-04-0504:32:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.001 Low

EPSS

Percentile

30.0%

urijs is vulnerable to open redirects. The vulnerability exists in the URI.parse function of URI.js because the redirect parameter does not properly validate scheme-relative URLs, which allows an attacker to redirect the user to harmful sites.

0.001 Low

EPSS

Percentile

30.0%