Lucene search
+L

1 matches found

OSV
OSV
added 2023/03/27 10:31 p.m.37 views

GHSA-CP4W-6X4W-V2H5 lambdaisland/uri `authority-regex` returns the wrong authority

Summary authority-regex allows an attacker to send malicious URLs to be parsed by the lambdaisland/uri and return the wrong authority. This issue is similar to CVE-2020-8910. Details https://github.com/lambdaisland/uri/blob/d3355fcd3e235238f4dcd37be97787a84e580072/src/lambdaisland/uri.cljcL9 This...

6.5CVSS5.7AI score0.00553EPSS
SaveExploits1References7
Rows per page
Query Builder