Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-2900 · ADVISORY
• ionicabizau/parse-url commit b88c81d · WEB
• IonicaBizau/parse-url · PACKAGE
• huntr.dev/bounties/1b4c972a-abc8-41eb-a2e1-696db746b5fd · WEB

parse-url 的其他漏洞

• CVE-2022-3224中危 6.1Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.
• CVE-2022-2218中危 6.1Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-2216严重 9.8Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-2217中危 6.1Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-0722高危 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.