VULNERABILITY INTELLIGENCE

CVE-2021-32721

CVSS score4.7 MEDIUM
EPSS probability0.61%
CISA KEVNot currently listed
Published2021-06-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to craft phishing links and other open redirects by exploiting the trailing slash redirection feature. This may lead to users being redirected to untrusted sites after following an attacker crafted link. The issue is resolved in v1.1.1. There are no existing workarounds.

Weakness classification

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references