Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2021-23387

19
FAUCET Score

CVE-2021-23387 is an Open Redirect vulnerability affecting versions of the 'trailing-slash' package prior to 2.0.1. This flaw allows an attacker to redirect users to arbitrary external sites by manipulating URLs with double slashes, due to the web server's reliance on relative URLs. With a CVSS score of 6.1 (Medium), it requires user interaction and can lead to information disclosure or phishing attacks. There is currently no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules. The vulnerability has received minimal community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.0.1CPE matchmatch criteria
cpe:2.3:a:trailing-slash_project:trailing-slash:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

5.4MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
2.5
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.15%
Probability of exploitation in next 30 days
EPSS Percentile
63.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0115 is in the 76th percentile among its peer group of 26,234 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
npmpatch availablevia ghsa
Product: trailing-slashFixed in: 2.0.1

Vendor Advisories (1)

npmGHSA-rfhr-62xp-2fp2medium

Open Redirect in trailing-slash

Jun 8, 2021

References

github.com / fardog/trailing-slash/blob/f640ece055fe85275c983de5eb94661b95e35670/index.js%23L36
Broken Link
github.com / fardog/trailing-slash/commit/f8e66f1429308247e5a119d430203077d8f05048
PatchThird Party Advisory
snyk.io / vuln/SNYK-JS-TRAILINGSLASH-1085707
ExploitPatchThird Party Advisory