Uncontrolled external site redirect In grafana
Description
A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to arbitrary external websites, potentially for phishing or other malicious purposes.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 7.18.0 | ||
 rpm rhel8 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel9 | - | - | |
rpm rhel8 | - | - |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3. 4. 5.