Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2024-9266

Open Redirect

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

expressjs express

Default version status: unaffected

  • 3.4.5 to < 4.0.0affected

References