5.4
Medium
CVE-2021-23495 The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query…
Description
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| karma 6.3 | earliest → < 6.3.16 | 6.3.16 |