CVE-2022-0613

Опубликовано: 16 фев. 2022

Источник: nvd

CVSS3: 5.3

CVSS3: 6.5

CVSS2: 6.4

EPSS Низкий

Описание

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.

Ссылки

https://github.com/medialize/uri.js/commit/6ea641cc8648b025ed5f30b090c2abd4d1a5249f
Patch
Third Party Advisory
https://huntr.dev/bounties/f53d5c42-c108-40b8-917d-9dad51535083
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXSSATHALUSXXD2KT6UFZAX7EG4GR332/
https://github.com/medialize/uri.js/commit/6ea641cc8648b025ed5f30b090c2abd4d1a5249f
Patch
Third Party Advisory
https://huntr.dev/bounties/f53d5c42-c108-40b8-917d-9dad51535083
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXSSATHALUSXXD2KT6UFZAX7EG4GR332/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uri.js_project:uri.js:*:*:*:*:*:*:*:*

Версия до 1.19.8 (исключая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00084

Низкий

5.3 Medium

CVSS3

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-639

Связанные уязвимости

CVE-2022-0613

CVSS3: 6.5

ubuntu

почти 4 года назад

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.

CVE-2022-0613

CVSS3: 6.5

redhat

почти 4 года назад

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.

CVE-2022-0613

CVSS3: 6.5

debian

почти 4 года назад

Authorization Bypass Through User-Controlled Key in NPM urijs prior to ...

GHSA-gcv8-gh4r-25x6

CVSS3: 6.5

github

почти 4 года назад

Authorization Bypass Through User-Controlled Key in urijs

EPSS

Процентиль: 25%

0.00084

Низкий

5.3 Medium

CVSS3

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-639