Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-447v-2qg4-h8hc

Опубликовано: 30 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.

EPSS

Процентиль: 6%
0.00022
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
5 месяцев назад

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.

CVSS3: 5.3
redhat
5 месяцев назад

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.

CVSS3: 5.3
nvd
5 месяцев назад

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.

msrc
5 месяцев назад

Insufficient validation of bracketed IPv6 hostnames in net/url

CVSS3: 5.3
debian
5 месяцев назад

The Parse function permits values other than IPv6 addresses to be incl ...

EPSS

Процентиль: 6%
0.00022
Низкий

5.3 Medium

CVSS3