CVE-2022-2218 Cross-site Scripting (XSS) - Stored in ionicabizau/parse-url

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

4chan-boards (>=1.0.0, <=2.0.1), 88slot-ap (1.0.0) +1066 more potentially affected by CVE-2022-2218 via parse-url (>=1.0.0, <=6.0.0)

parse-url NPM version =1.0.0, =1.0.0, =11.0.1, =0.1.2, =0.0.0-nightly-20240619-f62ef04, =0.3.0-SNAPSHOT.293, =1.0.1-SNAPSHOT.12, =1.3.0, =4.31.7, =4.33.0 and more Source cves: CVE-2022-2218 Source advisory: MEND:CVE-2022-2218...

CVE-2022-2217

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-0722

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2217

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-0722

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...

4chan-boards (>=1.0.0, <=2.0.1), 88slot-ap (1.0.0) +1066 more potentially affected by CVE-2022-0722 via parse-url (>=1.0.0, <=6.0.0)

parse-url NPM version =1.0.0, =1.0.0, =11.0.1, =0.1.2, =0.0.0-nightly-20240619-f62ef04, =0.3.0-SNAPSHOT.293, =1.0.1-SNAPSHOT.12, =1.3.0, =4.31.7, =4.33.0 and more Source cves: CVE-2022-0722 Source advisory: MEND:CVE-2022-0722...

CVE-2022-2217

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2217

The CVE-2022-2217 issue is a cross-site scripting (XSS) vulnerability in the npm package parse-url (GitHub: ionicabizau/parse-url) affecting versions prior to 7.0.0 . The root cause is the ability to inject or execute malicious JavaScript on webpages produced by the affected package through craft...

4chan-boards (>=1.0.0, <=2.0.1), 88slot-ap (1.0.0) +1066 more potentially affected by CVE-2022-2217 via parse-url (>=1.0.0, <=6.0.0)

parse-url NPM version =1.0.0, =1.0.0, =11.0.1, =0.1.2, =0.0.0-nightly-20240619-f62ef04, =0.3.0-SNAPSHOT.293, =1.0.1-SNAPSHOT.12, =1.3.0, =4.31.7, =4.33.0 and more Source cves: CVE-2022-2217 Source advisory: MEND:CVE-2022-2217...

PT-2022-13388

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue concerns exposure of sensitive information to an unauthorized actor. This occurs due to hostname confusion in the GitHub repository ionicabizau/parse-url. Recommendations For versions pri...

PT-2022-15279

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository ionicabizau/parse-url. Recommendations For versions prior to 7.0.0, update to version 7.0.0 or later to resolve t...

parse-url: Cross-site scripting vulnerability

parse-url is an advanced url parser with git url support. A cross-site scripting vulnerability exists in parse-url versions prior to 7.0.0, which stems from the ability to run malicious JS code using ASCII characters starting with and all special escape characters starting with Unicode, which can...

CVE-2022-2218: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

PT-2022-15277 · Parse-Url · Url-Parse

Name of the Vulnerable Software and Affected Versions: parse-url versions prior to 7.0.0 Description: The issue is related to Server-Side Request Forgery SSRF in the parse-url repository. This allows for the exploitation of parse URL to read local files. Recommendations: For versions prior to...

CVE-2022-2217: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2216: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-0722: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...

parse-url: Cross-site scripting vulnerability

parse-url is an advanced url parser with git url support. A cross-site scripting vulnerability exists in parse-url versions prior to 7.0.0, which stems from a last fix can be bypassed and can be exploited by an attacker to place any malicious JS code on a web page...

PT-2022-15282

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository ionicabizau/parse-url. Recommendations For versions prior to 7.0.0, update to version 7.0.0 or later t...