CVE-2026-53668

MEDIUM

React Router: Open redirect leading to XSS

설명

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors.

Score Summary

CVSS Score: 6.9
Version: 3.1
VPI: 69
Why this VPI (explainable, experimental)
VPI breakdown
Impact 69.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 69.00
VPI formula vpi-v1
EPSS: —
Attack Vector: Network
High Complexity
No Privileges
User Interaction Required
Scope Changed
High Confidentiality Impact
Low Integrity Impact
No Availability Impact

Details

References (6)

Affected Packages (2)

OSV

OSV

OSV

Impact	69.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	69.00