Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Joyent Node.js serve-static插件开放重定向漏洞
Vulnerability Description
Joyent Node.js是美国Joyent公司的一套建立在Google V8 JavaScript引擎之上的网络应用平台。serve-static是其中的一个静态文件服务器模块。 Joyent Node.js serve-static插件1.7.2之前版本中存在开放重定向漏洞。当程序安装在根目录下时，远程攻击者可通过在PATH_INFO变量中的域名后添加‘//’字符利用该漏洞将用户重定向到Web网站，实施钓鱼攻击。
CVSS Information
N/A
Vulnerability Type
N/A