Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-3743 EUVD-2018-0314GHSA-qmm9-x5gr-4gfm

Open Redirect in hekto

Published Jun 1, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Vendor: HackerOne Product: hekto Package: hekto Ecosystem: npm

Description

Open redirect in hekto <=0.2.3 when target domain name is used as html filename on server.

Affected products

VendorProductAffectedFixed
HackerOne hekto <=0.2.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm hekto < 0.2.4 0.2.4 GHSA-qmm9-x5gr-4gfm

References