Lucene search
PRIOn knowledge basePRION:CVE-2022-3095HistoryOct 27, 2022 - 4:15 p.m.
Design/Logic Flaw
2022-10-2716:15:00
PRIOn knowledge base
www.prio-n.com
6
dart
uri
backslash parsing
authentication bypass
incompatibility
web apps
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '' characters in URIs, which can lead to auth bypass in webapps interpreting URIs. We recommend updating Dart or Flutter to mitigate the issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dart_software_development_kit | lt | 2.18.0 | |
| flutter | lt | 3.3.3 |
Related
cve
cve
CVE-2022-3095
2022-10-27 16:15:09
osv
osv
CVE-2022-3095
2022-10-27 16:15:09
cvelist
cvelist
CVE-2022-3095 Incorrect parsing of the backslash characters in Dart library
2022-10-27 00:00:00
nvd
nvd
CVE-2022-3095
2022-10-27 16:15:09