Lucene search

K
githubGitHub Advisory DatabaseGHSA-J9FQ-VWQV-2FM2
HistorySep 15, 2022 - 12:00 a.m.

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url

2022-09-1500:00:24
CWE-918
GitHub Advisory Database
github.com
18
github
ssrf
parse-url
security vulnerability

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.002

Percentile

51.4%

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.

Affected configurations

Vulners
Node
url-parse_projecturl-parseRange<8.1.0
VendorProductVersionCPE
url-parse_projecturl-parse*cpe:2.3:o:url-parse_project:url-parse:*:*:*:*:*:*:*:*

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.002

Percentile

51.4%

Related for GHSA-J9FQ-VWQV-2FM2