Path traversal in url-parse

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-27515 · ADVISORY
• github/advisory-database#6763 · WEB
• unshiftio/url-parse#197 · WEB
• unshiftio/url-parse commit d1e7e88 · WEB
• advisory.checkmarx.net/advisory/CX-2021-4306 · WEB
• unshiftio/url-parse · PACKAGE
• unshiftio/url-parse · WEB
• lists.debian.org/debian-lts-announce/2023/02/msg00030.html · WEB

url-parse のその他の脆弱性

• CVE-2022-0691緊急 9.8Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
• CVE-2022-0686緊急 9.1Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
• CVE-2022-0639中 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
• CVE-2022-0512中 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
• CVE-2021-3664中 5.3url-parse is vulnerable to URL Redirection to Untrusted Site