Authorization Bypass Through User-Controlled Key in url-parse

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-0686 · ADVISORY
• unshiftio/url-parse commit d5c6479 · WEB
• unshiftio/url-parse · PACKAGE
• huntr.dev/bounties/55fd06cd-9054-4d80-83be-eb5a454be78c · WEB
• lists.debian.org/debian-lts-announce/2023/02/msg00030.html · WEB
• security.netapp.com/advisory/ntap-20220325-0006 · WEB
• security.netapp.com/advisory/ntap-20220325-0006 · Third Party Advisory

Lỗ hổng khác của url-parse

• CVE-2022-0691NGHIÊM TRỌNG 9.8Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
• CVE-2022-0639TRUNG BÌNH 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
• CVE-2022-0512TRUNG BÌNH 5.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
• CVE-2021-3664TRUNG BÌNH 5.3url-parse is vulnerable to URL Redirection to Untrusted Site
• CVE-2021-27515TRUNG BÌNH 5.3url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.