Lucene search
@huntrdevCVE-2022-3224HistorySep 15, 2022 - 12:15 p.m.
CVE-2022-3224
2022-09-1512:15:09
CWE-115
@huntrdev
web.nvd.nist.gov
36
4
cve-2022-3224
misinterpretation of input
github
repository
ionicabizau/parse-url
nvd
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
30.0%
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.
Affected configurations
Node
parse-url_projectparse-urlRange<8.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| parse-url_project | parse-url | * | cpe:2.3:a:parse-url_project:parse-url:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "ionicabizau/parse-url",
"vendor": "ionicabizau",
"versions": [
{
"lessThan": "8.1.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
veracode
veracode
Hostname Spoofing
2022-09-16 04:03:16
github
github
prion
prion
Design/Logic Flaw
2022-09-15 12:15:00
nvd
nvd
CVE-2022-3224
2022-09-15 12:15:09
huntr
huntr
Hostname Spoofing
2022-08-07 08:02:17
osv
osv
parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
2022-09-16 00:00:39
CVE-2022-3224
2022-09-15 12:15:09
cvelist
cvelist
CVE-2022-3224 Misinterpretation of Input in ionicabizau/parse-url
2022-09-15 11:30:12
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
30.0%
Related for CVE-2022-3224