CVE-2020-8124

2020-02-0419:08:56

CWE-20

hackerone

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

41.8%

JSON

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.

CNA Affected

[
  {
    "product": "url-parse",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed Version 1.4.5"
      }
    ]
  }
]