Описание
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
Ссылки
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.5.9 (исключая)
cpe:2.3:a:url-parse_project:url-parse:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 30%
0.00109
Низкий
6.5 Medium
CVSS3
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-639
CWE-639
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 4 года назад
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
CVSS3: 9.8
redhat
почти 4 года назад
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
CVSS3: 9.8
debian
почти 4 года назад
Authorization Bypass Through User-Controlled Key in NPM url-parse prio ...
CVSS3: 6.5
github
почти 4 года назад
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
EPSS
Процентиль: 30%
0.00109
Низкий
6.5 Medium
CVSS3
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-639
CWE-639