CVE-2022-012206.01.2022, 05:15forge is vulnerable to URL Redirection to Untrusted SiteOpen RedirectEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNIST6.1 MEDIUMNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N@huntrdevCNA5.3 MEDIUMNETWORKLOWNONECVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVEADP------Base ScoreCVSS 3.xEPSS ScorePercentile: 67%VendorProductVersiondigitalbazaarforge𝑥< 1.0.0𝑥= Vulnerable software versionsKnown Exploits!https://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4aehttps://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4aeCommon Weakness EnumerationCWE-601 - URL Redirection to Untrusted Site ('Open Redirect')A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.Referenceshttps://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5ehttps://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4aehttps://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5ehttps://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4ae