Vulnerabilities

 1 via 1 paths

Dependencies

 112

Source

 GitHub

Commit

 b9485ec3

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

high severity
new

Open Redirect

  • Vulnerable module: react-router
  • Introduced through: react-router-dom@5.3.1

Detailed paths

  • Introduced through: dstack-js@dstack-js/dstack#b9485ec37ed7013d7e63b59c5ec4e2d3522e86fb › react-router-dom@5.3.1 › react-router@5.3.1
    Remediation: Upgrade to react-router-dom@6.30.2.

Overview

Affected versions of this package are vulnerable to Open Redirect via the resolvePath() function when used with navigate, <Link>, or redirect. An attacker can cause the application to redirect users to external, potentially malicious URLs by supplying crafted paths.

Note:

This is only exploitable if untrusted content is passed into navigation paths in the application code.

Remediation

Upgrade react-router to version 6.30.2, 7.9.6 or higher.

References

Open Redirect vulnerability report