Jonathan Ginsburg

2 exploits Active since Feb 2022

CVE-2021-23495 WRITEUP MEDIUM WRITEUP

Karma < 6.3.16 - Open Redirect

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.

CVSS 5.4

View Code

CVE-2022-0437 WRITEUP MEDIUM WRITEUP

NPM karma <6.3.14 - XSS

Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.

CVSS 6.1

View Code