← All advisories

Medium severity6.1NVD Advisory· Published Jun 1, 2018· Updated Jun 17, 2026

CVE-2018-3743

CVE-2018-3743

Description

Open redirect in hekto <=0.2.3 when target domain name is used as html filename on server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
hektonpm	< 0.2.4	0.2.4

Affected products

2

ghsa-coords
pkg:npm/hekto
Range: < 0.2.4
HackerOne/hektov5
Range: <=0.2.3

Patches

Vulnerability mechanics

References

6

hackerone.com/reports/320693nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-qmm9-x5gr-4gfmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-3743ghsaADVISORY
github.com/herber/hekto/commit/1e5c75f8259ba0daf9b2600db3c246cda1934c46ghsaWEB
github.com/herber/hekto/pull/3ghsaWEB
www.npmjs.com/advisories/669ghsaWEB

News mentions

0

No linked articles in our index yet.