Lucene search

K
nodejsAnonymousNODEJS:1776
HistoryAug 10, 2021 - 4:10 p.m.

Open Redirect

2021-08-1016:10:27
Anonymous
www.npmjs.com
35

Overview

Overview

Affected versions of npm url-parse are vulnerable to URL Redirection to Untrusted Site.

Impact

Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior.

Recommendation

Upgrade to version 1.5.2 or later

References

CPENameOperatorVersion
url-parselt1.5.2