Unrated
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
CVE-2021-23495
First seen on SecPulse
Original description The description as published by the source.
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- patch github.com
- patch snyk.io
- patch snyk.io