← Back

Cors Proxy

cors-proxy

Vendor: Isomorphic Git • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-23664
1Isomorphic Git
1Cors Proxy
Nov 21, 2024
Jan 21, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.