Open Redirect in url-parse

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-3774 · ADVISORY
• unshiftio/url-parse commit 209c296 · WEB
• unshiftio/url-parse commit 53b1794 · WEB
• unshiftio/url-parse commit d7b582e · WEB
• hackerone.com/reports/384029 · WEB
• unshiftio/url-parse · PACKAGE
• unshiftio/url-parse · WEB

url-parse のその他の脆弱性

• CVE-2022-0691緊急 9.8Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
• CVE-2022-0686緊急 9.1Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
• CVE-2022-0639中 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
• CVE-2022-0512中 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
• CVE-2021-3664中 5.3url-parse is vulnerable to URL Redirection to Untrusted Site