Vulnerabilities

 1 via 1 paths

Dependencies

 104

Source

 GitHub

Commit

 417896c8

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

high severity
new

Open Redirect

  • Vulnerable module: react-router
  • Introduced through: react-router-dom@5.3.4

Detailed paths

  • Introduced through: basic-web-app@ttous/basic-web-app#417896c8cbd03c8eb4332e2c6f7855b6dc37dfb8 › react-router-dom@5.3.4 › react-router@5.3.4
    Remediation: Upgrade to react-router-dom@6.30.2.

Overview

Affected versions of this package are vulnerable to Open Redirect via the resolvePath() function when used with navigate, <Link>, or redirect. An attacker can cause the application to redirect users to external, potentially malicious URLs by supplying crafted paths.

Note:

This is only exploitable if untrusted content is passed into navigation paths in the application code.

Remediation

Upgrade react-router to version 6.30.2, 7.9.6 or higher.

References

Open Redirect vulnerability report