CVE-2022-0512

Опубликовано: 14 фев. 2022

Источник: nvd

CVSS3: 8.8

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

Ссылки

https://github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40
Patch
Third Party Advisory
https://huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b
Exploit
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
https://github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40
Patch
Third Party Advisory
https://huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b
Exploit
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:url-parse_project:url-parse:*:*:*:*:*:node.js:*:*

Версия до 1.5.6 (исключая)

EPSS

Процентиль: 7%

0.00026

Низкий

8.8 High

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-639

Связанные уязвимости

CVE-2022-0512

CVSS3: 5.3

ubuntu

почти 4 года назад

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

CVE-2022-0512

CVSS3: 8.8

redhat

около 4 лет назад

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

CVE-2022-0512

CVSS3: 5.3

debian

почти 4 года назад

Authorization Bypass Through User-Controlled Key in NPM url-parse prio ...

GHSA-rqff-837h-mm52

CVSS3: 5.3

github

почти 4 года назад

Authorization bypass in url-parse

EPSS

Процентиль: 7%

0.00026

Низкий

8.8 High

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-639