Server-Side Request Forgery in parse-url

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-2216 · ADVISORY
• ionicabizau/parse-url commit 21c72ab · WEB
• huntr.dev/bounties/505a3d39-2723-4a06-b1f7-9b2d133c92e1 · WEB

Weitere Schwachstellen in parse-url

• CVE-2022-3224MITTEL 6.1Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.
• CVE-2022-2900KRITISCH 9.1Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.
• CVE-2022-2218MITTEL 6.1Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-2217MITTEL 6.1Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-0722HOCH 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.