remix-run/react-router · Security
React Router has unexpected external redirect via untrusted paths
- GHSA ID
- GHSA-9jcx-v3wj-wh4m
- CVE ID
- CVE-2025-68470
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS v3
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
An attacker-supplied path can be crafted so that when a React Router application navigates to it via navigate(), <Link>, or redirect(), the app performs a navigation/redirect to an external URL. This is only an issue if developers pass untrusted content into navigation paths in their application code.
CWEs
- CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')