52 matches found
CVE-2022-24969
Apache Dubbo prior to versions 2.6.12 and 2.7.15 has a vulnerability where the parseURL method bypasses the white host check. The issue can enable open redirection or server-side request forgery (SSRF) as described in CVE-2022-24969 and related advisories. Affected component: parseURL handling in...
CVE-2022-24969 bypass of CVE-2021-25640
bypass CVE-2021-25640 In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability...
CVE-2022-24969
bypass CVE-2021-25640 In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability...
PT-2022-17019
Name of the Vulnerable Software and Affected Versions Apache Dubbo versions prior to 2.6.12 and 2.7.15 Description The issue arises from the usage of the parseURL method, which can lead to the bypass of the white host check. This can cause open redirect or Server-Side Request Forgery SSRF issues...
CVE-2022-24969: Server-Side Request Forgery (SSRF)
bypass CVE-2021-25640 In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability...
GHSA-GW4J-4229-Q4PX Server-Side Request Forgery in Apache Dubbo
In Apache Dubbo prior to 2.6.9 and 2.7.10, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability...
Server-Side Request Forgery (SSRF)
In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability...
Improper Input Validation
url-js is vulnerable to improper input validation. The vulnerability exists in parseUrl function in parseUrl.js because the inputs are not parsed properly which allows an attacker to perform host name spoofing...
GHSA-8FR3-HFG3-GPGP Open Redirect in node-forge
parseUrl functionality in node-forge mishandles certain uses of backslash such as https:///\ and interprets the URI as a relative path...
Open Redirect in node-forge
parseUrl functionality in node-forge mishandles certain uses of backslash such as https:///\ and interprets the URI as a relative path...
Server-Side Request Forgery (SSRF)
node-forge is vulnerable to server-side request forgery. The vulnerability exists in parseUrl because certain relative paths are mishandled when validating, which allows the bypass of the URL redirection validation...
PT-2022-12976
Name of the Vulnerable Software and Affected Versions forge versions prior to 1.0.0 Description The issue concerns a URL redirection vulnerability to untrusted sites. The parseUrl functionality in node-forge mishandles certain uses of backslash, such as https:///, and interprets the URI as a...
OSV-2021-1793 Heap-buffer-overflow in seturl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43160 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...
PT-2022-36639
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as seturl, parseurl, and curl url set. No information is...
OSV-2021-1758 Heap-buffer-overflow in seturl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42892 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...
PT-2021-27985
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash involves the functions seturl, parseurl, and curl url set. Recommendations At the moment,...
OSV-2021-1747 Heap-buffer-overflow in seturl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42808 Crash type: Heap-buffer-overflow READ 16 Crash state: seturl parseurl curlurlset...
PT-2021-27977
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as seturl, parseurl, and curl url set. No information is...
curl:curl_fuzzer_dict: Heap-buffer-overflow in seturl
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5206884234166272 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzerdict Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x60700002c212 Crash State:...