PT-2022-11630 · Oils-Js · Oils-Js

Published 2022-12-19 · Updated 2022-12-27 · CVE-2021-4260

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions oils-js (affected versions not specified)

Description A critical issue was found in oils-js, affecting the file core/Web.js, which can lead to an open redirect. The attack can be initiated remotely.

Recommendations To fix this issue, it is recommended to apply the patch fad8fbae824a7d367dacb90d56cb02c5cb999d42.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-4260

GHSA-V279-V2XM-WHQ9

Affected Products

Oils-Js

References · 7

• https://github.com/mannyvergel/oils-js/commit/fad8fbae824a7d367dacb90d56cb02c5cb999d42 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-4260 · Security Note
• https://osv.dev/vulnerability/CVE-2021-4260 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v279-v2xm-whq9 · Vendor Advisory
• https://github.com/mannyvergel/oils-js · Note
• https://vuldb.com/?id.216268 · Note
• https://web.archive.org/web/20211204010604/https://npmjs.com/package/oils · Note