CVE-2022-2218 Cross-site Scripting (XSS) - Stored in ionicabizau/parse-url

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

4chan-boards (>=1.0.0, <=2.0.1), 88slot-ap (1.0.0) +1068 more potentially affected by CVE-2022-2218 via parse-url (>=1.0.0, <=6.0.0)

parse-url NPM version =1.0.0, =1.0.0, =11.0.1, =0.1.2, =0.0.0-nightly-20240619-f62ef04, =0.3.0-SNAPSHOT.293, =1.0.1-SNAPSHOT.12, =1.3.0, =4.31.7, =4.33.0 and more Source cves: CVE-2022-2218 Source advisory: MEND:CVE-2022-2218...

CVE-2022-2217

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2217

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-0722

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...

4chan-boards (>=1.0.0, <=2.0.1), 88slot-ap (1.0.0) +1068 more potentially affected by CVE-2022-0722 via parse-url (>=1.0.0, <=6.0.0)

parse-url NPM version =1.0.0, =1.0.0, =11.0.1, =0.1.2, =0.0.0-nightly-20240619-f62ef04, =0.3.0-SNAPSHOT.293, =1.0.1-SNAPSHOT.12, =1.3.0, =4.31.7, =4.33.0 and more Source cves: CVE-2022-0722 Source advisory: MEND:CVE-2022-0722...

CVE-2022-0722

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2217

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2217

The CVE-2022-2217 issue is a cross-site scripting (XSS) vulnerability in the npm package parse-url (GitHub: ionicabizau/parse-url) affecting versions prior to 7.0.0 . The root cause is the ability to inject or execute malicious JavaScript on webpages produced by the affected package through craft...

4chan-boards (>=1.0.0, <=2.0.1), 88slot-ap (1.0.0) +1068 more potentially affected by CVE-2022-2217 via parse-url (>=1.0.0, <=6.0.0)

parse-url NPM version =1.0.0, =1.0.0, =11.0.1, =0.1.2, =0.0.0-nightly-20240619-f62ef04, =0.3.0-SNAPSHOT.293, =1.0.1-SNAPSHOT.12, =1.3.0, =4.31.7, =4.33.0 and more Source cves: CVE-2022-2217 Source advisory: MEND:CVE-2022-2217...

PT-2022-13388

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue concerns exposure of sensitive information to an unauthorized actor. This occurs due to hostname confusion in the GitHub repository ionicabizau/parse-url. Recommendations For versions pri...

PT-2022-15279

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository ionicabizau/parse-url. Recommendations For versions prior to 7.0.0, update to version 7.0.0 or later to resolve t...

parse-url code issue vulnerability

parse-url is an advanced url parser with git url support from the individual developer Ionică Bizău. A code issue vulnerability exists in parse-url versions prior to 7.0.0, which stems from improper handling of usernames and passwords, undetected hostnames, and can be exploited by an attacker to...

CVE-2022-2216: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2218: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

CVE-2022-2217: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...

PT-2022-15277 · Parse-Url · Url-Parse

Name of the Vulnerable Software and Affected Versions: parse-url versions prior to 7.0.0 Description: The issue is related to Server-Side Request Forgery SSRF in the parse-url repository. This allows for the exploitation of parse URL to read local files. Recommendations: For versions prior to...

parse-url information leakage vulnerability

parse-url is an advanced url parser with git url support. An information disclosure vulnerability exists in versions of parse-url prior to 7.0.0, which can be exploited by attackers to expose sensitive information to unauthorized participants...

CVE-2022-0722: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...

parse-url: Cross-site scripting vulnerability

parse-url is an advanced url parser with git url support. A cross-site scripting vulnerability exists in parse-url versions prior to 7.0.0, which stems from a last fix can be bypassed and can be exploited by an attacker to place any malicious JS code on a web page...