~ / search / GHSA-rc3x-jf5g-xvc5

GHSA-rc3x-jf5g-xvc5

Open redirect in karma

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23495

Packages

EcosystemPackageAffectedFixed in
npm karma < 6.3.16 6.3.16

Details

As written in the advisory (Markdown source, shown as plain text).

Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.

References

External links from the advisory. They lead to third-party sites.