Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open Redirect
Vulnerability Description
The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example/). The vulnerable code is in index.js::removeTrailingSlashes(), as the web server uses relative URLs instead of absolute URLs.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
koa-remove-trailing-slashes 输入验证错误漏洞
Vulnerability Description
koa-remove-trailing-slashes是一个应用软件。一个Koa中间件，可删除路径上的尾部斜杠。 koa-remove-trailing-slashes 2.0.2之前版本存在安全漏洞，该漏洞源于容易受到Open Redirect的攻击。
CVSS Information
N/A
Vulnerability Type
N/A