CVE-2024-43796

CVE-2024-43796 describes a vulnerability in Express.js versions prior to 4.20.0, where untrusted user input, even after sanitization, passed to response.redirect() could lead to arbitrary code execution. This medium-severity vulnerability has a CVSS score of 4.7, indicating a network attack vector with high attack complexity and requiring user interaction, potentially leading to limited confidentiality and integrity impacts. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.