medium6.3
CVE-2021-4260
Oils JS vulnerable to Open Redirect
Impact
A vulnerability was found in oils-js. This vulnerability affects unknown code of the file core/Web.js. The manipulation leads to open redirect and the attack can be initiated remotely. The name of the patch is fad8fbae824a7d367dacb90d56cb02c5cb999d42. It is recommended to apply a patch to fix this issue.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | oils | < 8.0.0 | 8.0.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oils-Js Project | Oils-Js | before 2021-03-23 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/mannyvergel/oils-js/commit/fad8fbae824a7d367dacb90d56cb02c5cb999d42
- https://vuldb.com/?id.216268
- https://github.com/advisories/GHSA-v279-v2xm-whq9
- https://nvd.nist.gov/vuln/detail/CVE-2021-4260
- https://web.archive.org/web/20211204010604/https://www.npmjs.com/package/oils