Non évaluée
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
CVE-2021-23495
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- patch github.com
- patch snyk.io
- patch snyk.io