GHSA-jj78-5fmv-mv28

ghsaUSosv

Express Open Redirect vulnerability

view advisory published 2024-10-03Licence: CC-BY-4.0

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0-rc1.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-9266US	—	0.46% (40th)	—	2024-10-03
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.…

references

External citations — patches, advisories, analysis.

https://github.com/expressjs/expressPACKAGE
https://github.com/expressjs/express/compare/3.4.4...3.4.5WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-9266ADVISORY
https://www.herodevs.com/vulnerability-directory/cve-2024-9266WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan