5.1
Moyenne
CVE-2025-8129 A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0
Description
A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js of the component HTTP Header Handler. The manipulation of the argument Referrer leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| koa | 3.0 | Pas de correctif indiqué |
Références
- VDB-317514 | KoaJS Koa HTTP Header response.js back redirect vuldb.com
- VDB-317514 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #619741 | KoaJS Koa <=3.0.0 commit cb22d8dc Open Redirect vuldb.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de koa
Les 5 CVE de koa →
CVE-2026-27959
Koa is middleware for Node.js using ES2017 async functions
7.5
Élevée
CVE-2025-62595
Koa is expressive middleware for Node.js using ES2017 async functions
4.3
Moyenne
CVE-2025-32379
Koa is expressive middleware for Node.js using ES2017 async functions
5.0
Moyenne
CVE-2025-25200
Koa is expressive middleware for Node.js using ES2017 async functions
9.2
Critique