Skip to content

Oils JS vulnerable to Open Redirect

Moderate severity GitHub Reviewed Published Dec 19, 2022 to the GitHub Advisory Database • Updated Jan 27, 2023

Package

npm oils (npm)

Affected versions

< 8.0.0

Patched versions

8.0.0

Description

A vulnerability was found in oils-js. This vulnerability affects unknown code of the file core/Web.js. The manipulation leads to open redirect and the attack can be initiated remotely. The name of the patch is fad8fbae824a7d367dacb90d56cb02c5cb999d42. It is recommended to apply a patch to fix this issue.

References

Published by the National Vulnerability Database Dec 19, 2022
Published to the GitHub Advisory Database Dec 19, 2022
Reviewed Dec 19, 2022
Last updated Jan 27, 2023

Severity

Moderate
6.3
/ 10

CVSS base metrics

Attack vector
Network
Attack complexity
Low
Privileges required
Low
User interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CVE ID

CVE-2021-4260

GHSA ID

GHSA-v279-v2xm-whq9

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.