Lucene search
@huntrdevCVELIST:CVE-2022-0686HistoryFeb 20, 2022 - 12:00 a.m.
CVE-2022-0686 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
2022-02-2000:00:00
CWE-639
@huntrdev
www.cve.org
1
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.1%
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
CNA Affected
[
{
"vendor": "unshiftio",
"product": "unshiftio/url-parse",
"versions": [
{
"version": "unspecified",
"lessThan": "1.5.8",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
debiancve
debiancve
CVE-2022-0686
2022-02-20 13:15:07
veracode
veracode
Authorization Bypass
2022-02-21 06:18:22
ubuntucve
ubuntucve
CVE-2022-0686
2022-02-20 00:00:00
prion
prion
Authorization
2022-02-20 13:15:00
osv
osv
CVE-2022-0686
2022-02-20 13:15:07
Authorization Bypass Through User-Controlled Key in url-parse
2022-02-21 00:00:21
node-url-parse - security update
2023-02-23 00:00:00
nvd
nvd
CVE-2022-0686
2022-02-20 13:15:07
cnvd
cnvd
NPM url-parse authorization bypass vulnerability
2022-02-22 00:00:00
cve
cve
CVE-2022-0686
2022-02-20 13:15:07
github
github
Authorization Bypass Through User-Controlled Key in url-parse
2022-02-21 00:00:21
redhatcve
redhatcve
CVE-2022-0686
2022-03-02 14:50:01
huntr
huntr
Authorization Bypass Through User-Controlled Key
2022-02-17 20:30:43
debian
debian
[SECURITY] [DLA 3336-1] node-url-parse security update
2023-02-23 00:55:13
openvas
openvas
Debian: Security Advisory (DLA-3336-1)
2023-02-23 00:00:00
Ubuntu: Security Advisory (USN-5973-1)
2023-03-28 00:00:00
nessus
nessus
Debian DLA-3336-1 : node-url-parse - LTS security update
2023-02-23 00:00:00
ubuntu
ubuntu
url-parse vulnerabilities
2023-03-27 00:00:00
ibm
ibm
redhat
redhat
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.1%
Related for CVELIST:CVE-2022-0686