CNNVD-202509-4447 Information

CNNVD ID

CNNVD-202509-4447

CVE-2025-56200

  • CNNVD Published: 2025-09-30

Description (Chinese)

Validator.js是一个字符串验证器 validator.js 13.15.15及之前版本存在安全漏洞,该漏洞源于URL验证绕过,可能导致跨站脚本和开放重定向攻击。

Description (English)

Validator.js is a string certifier Validator.js 13.15.15 and previous versions contain a security loophole that originates from the URL certification bypass and could lead to cross-site scripts and open redirection attacks.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-09-30

Last Modified

2026-02-24

References

http://validatorjs.com https://gist.github.com/junan-98/27ae092aa40e2a057d41a0f95148f666 https://gist.github.com/junan-98/a93130505b258b9e4ec9f393e7533596 https://github.com/validatorjs/validator.js

Share on: