MEDIUM 6.9
GHSA-jjmj-jmhj-qwj2
React Router: Open redirect leading to XSS
빠른 조치
GHSA-jjmj-jmhj-qwj2 — react-router: 아래 명령으로 수정 버전으로 올리세요.
npm install react-router@7.13.0상세
Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
npm / react-router-dom
최초 영향 버전:
6.30.2 No fixed version published yet for react-router-dom (npm). Pin to a known-safe version or switch to an alternative.
참고
- https://github.com/remix-run/react-router/security/advisories/GHSA-jjmj-jmhj-qwj2 [WEB]
- https://github.com/remix-run/react-router/pull/14718 [WEB]
- https://github.com/remix-run/react-router/commit/3a5b5ad0e5cf9918c646509563f5c41a89226ff3 [WEB]
- https://github.com/remix-run/react-router [PACKAGE]
- https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180 [WEB]
- https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0 [WEB]