CVE-2022-0122

forge is vulnerable to URL Redirection to Untrusted Site

Score

CVSS 3.1 6.1 Medium

Status

Modified - security@huntr.dev

Published

2022-01-06

Last modified

2024-08-02

Weaknesses

CWE-601

Affected products

• Digitalbazaarforge (Digitalbazaar)
• Forge (Digitalbazaar)

References

• https://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5e
• https://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4ae