CVE-2022-0686

Опубликовано: 20 фев. 2022

Источник: nvd

CVSS3: 6.5

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

Ссылки

https://github.com/unshiftio/url-parse/commit/d5c64791ef496ca5459ae7f2176a31ea53b127e5
Patch
Third Party Advisory
https://huntr.dev/bounties/55fd06cd-9054-4d80-83be-eb5a454be78c
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
https://security.netapp.com/advisory/ntap-20220325-0006/
Third Party Advisory
https://github.com/unshiftio/url-parse/commit/d5c64791ef496ca5459ae7f2176a31ea53b127e5
Patch
Third Party Advisory
https://huntr.dev/bounties/55fd06cd-9054-4d80-83be-eb5a454be78c
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
https://security.netapp.com/advisory/ntap-20220325-0006/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:url-parse_project:url-parse:*:*:*:*:*:node.js:*:*

Версия до 1.5.8 (исключая)

EPSS

Процентиль: 77%

0.01827

Низкий

6.5 Medium

CVSS3

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-639

Связанные уязвимости

CVE-2022-0686

CVSS3: 9.1

ubuntu

больше 4 лет назад

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

CVE-2022-0686

CVSS3: 9.1

redhat

больше 4 лет назад

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

CVE-2022-0686

CVSS3: 9.1

debian

больше 4 лет назад

Authorization Bypass Through User-Controlled Key in NPM url-parse prio ...

GHSA-hgjh-723h-mx2j

CVSS3: 9.1

github

больше 4 лет назад

Authorization Bypass Through User-Controlled Key in url-parse

EPSS

Процентиль: 77%

0.01827

Низкий

6.5 Medium

CVSS3

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-639