CVE-2024-9266CWE-601

Open Redirect

Medium · published October 3, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-10-03T18:56Z
EPSS history
Timeline
  • 03 OCT 18:56Z
    Open Redirect
    cvelistv5