Description
Open redirect in hekto <=0.2.3 when target domain name is used as html filename on server.
Remediation
References
https://hackerone.com/reports/320693
Related Vulnerabilities
CVE-2017-11429 Vulnerability in npm package saml2-js
CVE-2019-10746 Vulnerability in maven package org.webjars.npm:mixin-deep
CVE-2020-8127 Vulnerability in maven package org.webjars:reveal.js
CVE-2021-23574 Vulnerability in npm package js-data
CVE-2022-44729 Vulnerability in maven package org.apache.xmlgraphics:batik-transcoder