Description (CNA)
The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.npmjs.com/package/slashify
- https://securitylab.github.com/advisories/GHSL-2020-199-open-redirect-slashify
- https://security.netapp.com/advisory/ntap-20210401-0004/
ADP enrichment
No English description supplied.