Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:36437
HistoryJul 22, 2022 - 8:40 a.m.

Open Redirect

2022-07-2208:40:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.001 Low

EPSS

Percentile

41.3%

JSON

undici is vulnerable to open redirect. The vulnerability exists due to the insufficient checks in shouldRemoveHeader function, which results in accidental leakage of cookie headers, allowing an attacker to redirect the victim to an attacker controlled site.

CPENameOperatorVersion
undicile5.4.0
undicile5.7.0
undicile5.4.0
undicile5.7.0

Related

prion 1
nvd 1
debiancve 1
cve 1
ubuntucve 1
cvelist 1
redhatcve 1
osv 3
github 1
redhat 1
prion
prion
Authorization
2022-07-21 04:15:00
nvd
nvd
CVE-2022-31151
2022-07-21 04:15:12
debiancve
debiancve
CVE-2022-31151
2022-07-21 04:15:12
cve
cve
CVE-2022-31151
2022-07-21 04:15:12
ubuntucve
ubuntucve
CVE-2022-31151
2022-07-21 00:00:00
cvelist
cvelist
CVE-2022-31151 Uncleared cookies on cross-host/cross-origin redirect in undici
2022-07-20 23:00:15
redhatcve
redhatcve
CVE-2022-31151
2022-08-25 11:40:39
osv
osv
Undici's cookie header not cleared on cross-origin redirect in fetch
2023-10-16 14:05:37
CVE-2023-45143
2023-10-12 17:15:10
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
2022-07-21 20:31:05
github
github
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
2022-07-21 20:31:05
redhat
redhat
(RHSA-2022:6696) Critical: Red Hat Advanced Cluster Management 2.4.6 security update and bug fixes
2022-09-26 11:54:51

0.001 Low

EPSS

Percentile

41.3%

JSON
Related for VERACODE:36437
prion1nvd1debiancve1cve1ubuntucve1cvelist1redhatcve1osv3github1redhat1