PT-2018-16165 · Hekto · Hekto

Published 2018-06-01 · Updated 2023-01-30 · CVE-2018-3743

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions hekto versions prior to 0.2.4

Description The issue is related to an open redirect when a domain name is used as part of the .html filename on the server.

Recommendations Update to version 0.2.4 or later.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2018-3743

GHSA-QMM9-X5GR-4GFM

Affected Products

Hekto

References · 8

• 🔥 https://hackerone.com/reports/320693 · Exploit
• https://osv.dev/vulnerability/GHSA-qmm9-x5gr-4gfm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-3743 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3743 · Security Note
• https://github.com/herber/hekto/pull/3 · Note
• https://github.com/herber/hekto/commit/1e5c75f8259ba0daf9b2600db3c246cda1934c46 · Note
• https://npmjs.com/advisories/669 · Note
• https://github.com/advisories/GHSA-qmm9-x5gr-4gfm · Note