medium6.1
CVE-2021-3189
The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring.
Impact
The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slashify | Version 1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://security.netapp.com/advisory/ntap-20210401-0004/
- https://securitylab.github.com/advisories/GHSL-2020-199-open-redirect-slashify
- https://www.npmjs.com/package/slashify
- https://security.netapp.com/advisory/ntap-20210401-0004/
- https://securitylab.github.com/advisories/GHSL-2020-199-open-redirect-slashify
- https://www.npmjs.com/package/slashify