Improper Validation and Sanitization in url-parse

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-8124 · ADVISORY
• github/advisory-database#6762 · WEB
• unshiftio/url-parse commit 3ecd256 · WEB
• hackerone.com/reports/496293 · WEB
• unshiftio/url-parse · PACKAGE

url-parse의 다른 취약점

• CVE-2022-0691심각 9.8Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
• CVE-2022-0686심각 9.1Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
• CVE-2022-0639보통 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
• CVE-2022-0512보통 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
• CVE-2021-3664보통 5.3url-parse is vulnerable to URL Redirection to Untrusted Site