Internet Bug Bounty: [CVE-2022-35949]: undici.request vulnerable to SSRF using absolute / protocol-relative URL on pathname

GHSA: https://github.com/nodejs/undici/security/advisories/GHSA-8qr4-xgw6-wmr3 Report: https://hackerone.com/reports/1642017 Impact SSRF...

Informatica: [marketplace.informatica.com] Open Redirect

marketplace.informatica.com contains an open redirect due to a flawed URL rewrite rule. All requests containing a single quote: ' are met with a 302 redirect to the same URL, minus the single quote. As the Location header uses a protocol-relative URL, this can be abused to redirect people to...

Out-of-bounds

The DoResolveRelativeHost function in url/urlcanonrelative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service out-of-bounds read via a relative URL containing a hostname, as demonstrated by a protocol-relative URL beginning with a //www.google.com/...