CVE-2018-3743

MEDIUM6.1EPSS 0.16%

Open Redirect in hekto

發布日:2018/7/18修改日:2023/11/8

描述

Versions of `hekto` before 0.2.4 are vulnerable to open redirect when a domain name is used as part of the `.html` filename. ## Recommendation Update to version 0.2.4 or later.

受影響套件(1)

npm/hektofrom 0, < 0.2.4

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

參考連結(6)

ADVISORYhttps://github.com/advisories/GHSA-qmm9-x5gr-4gfm
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-3743
WEBhttps://github.com/herber/hekto/commit/1e5c75f8259ba0daf9b2600db3c246cda1934c46
WEBhttps://github.com/herber/hekto/pull/3
WEBhttps://hackerone.com/reports/320693
WEBhttps://www.npmjs.com/advisories/669