CVE-2024-43796
10.09.2024, 15:15
Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.
| Vendor | Product | Version |
|---|---|---|
| openjsf | express | 𝑥 < 4.20.0 |
| openjsf | express | 5.0.0:alpha1 |
| openjsf | express | 5.0.0:alpha2 |
| openjsf | express | 5.0.0:alpha3 |
| openjsf | express | 5.0.0:alpha4 |
| openjsf | express | 5.0.0:alpha5 |
| openjsf | express | 5.0.0:alpha6 |
| openjsf | express | 5.0.0:alpha7 |
| openjsf | express | 5.0.0:alpha8 |
| openjsf | express | 5.0.0:beta1 |
| openjsf | express | 5.0.0:beta2 |
| openjsf | express | 5.0.0:beta3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| node-express |
|