CVE-2025-59430: Unvalidated Base64 Url
Base64 decoded data is parsed or used as a URL without protocol validation. Ensure the URL scheme is validated against 'http://' or 'https://' before using it to prevent Cross-Site Scripting (XSS).
Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0javascript
greprules fetch cve-2025-59430-unvalidated-base64-url --engine opengrepDescription
Base64 decoded data is parsed or used as a URL without protocol validation. Ensure the URL scheme is validated against 'http://' or 'https://' before using it to prevent Cross-Site Scripting (XSS).
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.