CVE-2021-32721
Published: 29 June 2021
Summary
CVE-2021-32721 is a medium-severity Open Redirect (CWE-601) vulnerability in Powermux Project Powermux. Its CVSS base score is 4.7 (Medium).
Operationally, ranked at the 42.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-1482
Vulnerability details
PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to craft phishing links and other open redirects by exploiting the trailing slash redirection feature. This may lead to users being redirected…
more
to untrusted sites after following an attacker crafted link. The issue is resolved in v1.1.1. There are no existing workarounds.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.