~ / search / GHSA-m69r-4h68-xq7j

GHSA-m69r-4h68-xq7j

Knock Knock plugin Open redirection vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-13486

Packages

EcosystemPackageAffectedFixed in
Packagist verbb/knock-knock < 1.2.8 1.2.8

Details

As written in the advisory (Markdown source, shown as plain text).

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

References

External links from the advisory. They lead to third-party sites.