Vulnerabilities

 1 via 1 paths

Dependencies

 104

Source

 GitHub

Commit

 46ba2233

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity
new

Open Redirect

  • Vulnerable module: koa
  • Introduced through: koa@2.16.2

Detailed paths

  • Introduced through: spigot-anti-piracy-backend@timbru31/spigot-anti-piracy-backend#46ba2233d1172970eb68f740fe212fbc43565c24 › koa@2.16.2

Overview

koa is a Koa web app framework

Affected versions of this package are vulnerable to Open Redirect via the redirect function in lib/response.js due to improper input sanitization. An attacker can redirect users to arbitrary external sites by exploiting this vulnerability.

Remediation

A fix was pushed into the master branch but not yet published.

References

Open Redirect vulnerability report