PT-2022-15282

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository ionicabizau/parse-url. Recommendations For versions prior to 7.0.0, update to version 7.0.0 or later t...

parse-url: Cross-site scripting vulnerability

parse-url is an advanced url parser with git url support. A cross-site scripting vulnerability exists in parse-url versions prior to 7.0.0, which stems from the ability to run malicious JS code using ASCII characters starting with and all special escape characters starting with Unicode, which can...

Cross Site Scripting via Improper Input Validation

Description The parse-url The 5.0.8 version of the parser does not check :// character between protocols. This causes spoofing of the javascript protocol itself. Additionally, protocol spoofing does not occur in url-parse, new URL, and url.parse other than parse-url. Proof of Concept const parseU...

hostname spoofing via Improper Input Validation

Description When to use the parse-url, If user put the https://google.comhashvalue as argument, parse-url doesn't parse the hash value and parses hostname and hash together as hostname. http://localhost/hashvalue and http://localhosthashvalue are the same.. txt - new URL of node ❯ node -e...

Open Redirect

Description parse-url parses the url as https://google.com::/test, and if two or more colons are inserted in the port part, the port is parsed as one hostname. txt - node - url.parse ❯ node -e 'console.logrequire"url".parse"https://google.com::/test"' Url protocol: 'https:', slashes: true, auth:...

Improper Input Validation

Description If an attacker inserts a null byte at the beginning of the javascript scheme, parse will not parse the javascript scheme properly. Therefore, all null bytes must be removed before parsing. Proof of Concept javascript const parseUrl = require"parse-url" url =...

Improper Input Validation

Description If hostname is not entered as in the following PoC, Open Redirect and SSRF occur because hostname is empty. Proof of Concept javascript // PoC : http:@127.0.0.1 const parseUrl = require"parse-url" const http = require"http" url = parseUrl"http:@127.0.0.1" console.logurl...

Exposure of Sensitive Information to an Unauthorized Actor in ionicabizau/parse-url

Description First Assume this example var parseUrl = require"parse-url" parseUrl"http://[email protected]:[email protected]/path/name?foo=bar&bar=42some-hash" that return : protocols: "http" protocol: "http" port: null resource: "[email protected]" user: "" pathname:...

in ionicabizau/parse-url

Description urldomain validation bypass Proof of Concept parse-url not able verify urldomain properly when basic authentication is given .This allow to bypass hostname validation . Lets username is admin and password is password123@ and hostname is 127.0.0.1 . so the url will be...

PT-2022-36641

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...

PT-2021-27984

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3 parse...

PT-2021-27972

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...

PT-2021-27916

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the smtp parse...

Open Redirect in ionicabizau/parse-url

✍️ Description parse-url improperly handles the user input such as https:/\ and interprets it as a relative path. Backslashes after the protocol are accepted by browsers and treated as normal slashes, but parse-url reads them as the relative path, which could lead to SSRF, open redirects, or other...

Open Redirect in ionicabizau/parse-url

✍️ Description parse-url mishandles certain uses of backslash such as https:/\ and interprets the URI as a relative path. Browsers accept backslashes after the protocol, and treat it as a normal slash, while parse-url sees it as a relative path. Which will lead to SSRF attacks, open redirects, or...

CVE-2021-25640

In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability...

CVE-2021-27329

Friendica 2021.01 allows SSRF via parseurl?binurl= for DNS lookups or HTTP requests to arbitrary domain names...

PT-2021-17398

Name of the Vulnerable Software and Affected Versions Friendica version 2021.01 Description The issue allows for Server-Side Request Forgery SSRF via the parse url parameter with binurl for DNS lookups or HTTP requests to arbitrary domain names. This could potentially be exploited to access...

PT-2019-3315

Name of the Vulnerable Software and Affected Versions MOXA EDR-810 affected versions not specified Description The issue is related to multiple vulnerabilities in the my parse url function of the web server in the MOXA EDR-810 industrial router. The vulnerabilities are caused by a lack of size...

PT-2017-4184

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.28 PHP versions 7.x prior to 7.0.13 Description The issue arises from incorrect handling of various URI components in the URL parser, which could allow attackers to bypass hostname-specific URL checks. This is...