parseUrl functionality in node-forge mishandles certain uses of backslash such as https:///\ and interprets the URI as a relative path...
6.1CVSS6.3AI score0.00839EPSS
SaveExploits1References4
UbuntuCve•added 2021/08/07 6:15 p.m.•28 views
CVE-2021-38165
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data...
