kiota-typescript vulnerabilities
1 known vulnerability in kiota-typescript from Microsoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.0average CVSS score
Latest first
- 7.0 High severity
kiota-java: URL Redirection to Untrusted Site
The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization h