176 matches found
0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4567 more potentially affected by CVE-2021-3664 via url-parse (>=0.1.5, <=1.5.1)
url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-3664 Source advisory: OSV:GHSA-HH27-FFR2-F2JC...
CVE-2021-3664
An input validation flaw was found in the nodejs url-parse library, which incorrectly parses a URL that contains backslashes. This flaw allows an attacker to specify a relative URL and cause the browser to redirect to a malicious website. The highest threat from this vulnerability is to integrity...
CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site...
DEBIAN-CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site...
UBUNTU-CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3664 Open Redirect in unshiftio/url-parse
url-parse is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3664
CVE-2021-3664 affects the url-parse library and enables a URL Redirection to Untrusted Site (Open Redirect) via its URL parsing logic. According to the connected document, the vulnerability is rooted in the url-parse component and has a CVSS v3.1 base score of 5.3 with vector (AV:N/AC:L/PR:N/UI:N...
PT-2021-21304 · Npm +2 · Url-Parse +2
Name of the Vulnerable Software and Affected Versions: url-parse affected versions not specified Description: The issue concerns URL redirection to untrusted sites. Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or othe...
Open Redirect in unshiftio/url-parse
✍️ Description url-parse mishandles certain uses of backslash such as https:/\ and interprets the URI as a relative path. Browsers accept backslashes after the protocol, and treat it as a normal slash, while url-parse sees it as a relative path. Similar attacks:...
Path traversal
Overview url-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path. Recommendation Upgrade to version 1.5.0 or later References - CVE - GitHub Advisory...
GHSA-9M6J-FCG5-2442 Path traversal in url-parse
url-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path...
Path traversal in url-parse
url-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path...
0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4508 more potentially affected by CVE-2021-27515 via url-parse (>=0.1.5, <=1.4.7)
url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-27515 Source advisory: OSV:GHSA-9M6J-FCG5-2442...
CVE-2018-3774
A flaw was found in nodejs-url-parse. The wrong hostname can be returned, due to incorrect parsing, which can lead to a variety of vulnerabilities. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...