Authorization

🗓️ 21 Feb 2022 09:15:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 18 Views

Authorization Bypass in NPM url-parse v1.5.

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.	16 Aug 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to Using Components with Known Vulnerabilities	25 Jul 202213:54	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
Huntr	Authorization Bypass Through User-Controlled Key	19 Feb 202204:00	–	huntr
ATTACKERKB	CVE-2022-0691	21 Feb 202209:15	–	attackerkb
Circl	CVE-2022-0691	21 Feb 202212:41	–	circl
CNNVD	Unshiftio Url-parse 访问控制错误漏洞	21 Feb 202200:00	–	cnnvd
CVE	CVE-2022-0691	21 Feb 202200:00	–	cve
Cvelist	CVE-2022-0691 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse	21 Feb 202200:00	–	cvelist

Source	Link
github	www.github.com/unshiftio/url-parse/commit/0e3fb542d60ddbf6933f22eb9b1e06e25eaa5b63
huntr	www.huntr.dev/bounties/57124ed5-4b68-4934-8325-2c546257f2e4
security	www.security.netapp.com/advisory/ntap-20220325-0006/
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00030.html

23 Feb 2023 03:15Current

9.2High risk

Vulners AI Score9.2

EPSS0.0222

authorization bypass user-controlled key nvd