CVE-2025-8129
- Source
- https://cve.org/CVERecord?id=CVE-2025-8129
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8129.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-8129
- Aliases
- Downstream
- Published
- 2025-07-25T04:02:05.418Z
- Modified
- 2026-07-15T02:17:04.039536409Z
- Severity
-
- 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- KoaJS Koa HTTP Header response.js back redirect
- Details
-
A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js of the component HTTP Header Handler. The manipulation of the argument Referrer leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- Database specific
{ "cwe_ids": [ "CWE-601" ], "cna_assigner": "VulDB", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8129.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8129.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-8129
- https://vuldb.com/?id.317514
- https://vuldb.com/?submit.619741
- https://github.com/koajs/koa/issues/1892
- https://github.com/koajs/koa/issues/1892#issue-3213028583
- https://vuldb.com/?ctiid.317514
Affected packages
Git / github.com/koajs/koa
Affected ranges
- Type
- GIT
- Repo
- https://github.com/koajs/koa
- Events
-
IntroducedFixedIntroducedLast affected
- Database specific
{ "source": [ "CPE_RANGE", "CPE_STRING" ], "cpe": [ "cpe:2.3:a:koajs:koa:*:*:*:*:*:node.js:*:*", "cpe:2.3:a:koajs:koa:3.0.0:-:*:*:*:node.js:*:*" ], "extracted_events": [ { "introduced": "2.0.0" }, { "fixed": "2.16.2" }, { "introduced": "3.0.0-NA" }, { "last_affected": "3.0.0-NA" } ] }