Описание
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| uriparser | unfixed | package | ||
| uriparser | no-dsa | trixie | package | |
| uriparser | no-dsa | bookworm | package |
Примечания
https://github.com/uriparser/uriparser/pull/305
Fixed by: https://github.com/uriparser/uriparser/commit/723717c713a01c08efed6b3ded9583d7819e3386 (uriparser-1.0.2)
Test: https://github.com/uriparser/uriparser/commit/bd7f2e6c0c17dd78853f85107535391b4635a86d
EPSS
Процентиль: 12%
0.00211
Низкий
Связанные уязвимости
CVSS3: 2.9
ubuntu
5 месяцев назад
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
CVSS3: 5.3
redhat
5 месяцев назад
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
CVSS3: 2.9
nvd
5 месяцев назад
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
EPSS
Процентиль: 12%
0.00211
Низкий