Vulnerabilities

 1 via 1 paths

Dependencies

 19

Source

 GitHub

Commit

 e54e278f

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

high severity
new

Open Redirect

  • Vulnerable module: react-router
  • Introduced through: react-router-dom@4.3.1

Detailed paths

  • Introduced through: react-universal-app@jtart/react-universal-app#e54e278f05b20cf1e9a1019a52ab0f90e9c47a40 › react-router-dom@4.3.1 › react-router@4.3.1
    Remediation: Upgrade to react-router-dom@6.30.2.

Overview

Affected versions of this package are vulnerable to Open Redirect via the resolvePath() function when used with navigate, <Link>, or redirect. An attacker can cause the application to redirect users to external, potentially malicious URLs by supplying crafted paths.

Note:

This is only exploitable if untrusted content is passed into navigation paths in the application code.

Remediation

Upgrade react-router to version 6.30.2, 7.9.6 or higher.

References

Open Redirect vulnerability report