Oils JS vulnerable to Open Redirect

Description

A vulnerability was found in oils-js. This vulnerability affects unknown code of the file core/Web.js. The manipulation leads to open redirect and the attack can be initiated remotely. The name of the patch is fad8fbae824a7d367dacb90d56cb02c5cb999d42. It is recommended to apply a patch to fix this issue.

Recommendation

Update the oils package to the latest compatible version. Followings are version details:

• Affected version(s): < 8.0.0
• Patched version(s): 8.0.0

References

• GHSA-v279-v2xm-whq9
• vuldb.com
• web.archive.org
• CVE-2021-4260
• CWE-601
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• DOMpurify has a nesting-based mXSS - CVE-2024-47875
• Path Traversal in simplehttpserver - CVE-2018-16478
• Cross-Site Scripting in html-pages - CVE-2018-16481
• Path Traversal in http-server-node - CVE-2021-23797

Tags:

npm

oils