Lucene search
+L

222 matches found

vulnersOsv
vulnersOsv
•added 2022/01/06 8:30 p.m.•2 views

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +724 more potentially affected by CVE-2020-8124 via url-parse (>=0.1.5, <=1.4.4)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.1.1, =0.0.1, =0.1.0, =0.0.0-4, =0.0.1, =1.2.5, =1.5.0, =0.1.0, =0.1.7 and more Source cves: CVE-2020-8124 Source advisory: GHSA-46C4-8WRP-J99V...

5.3CVSS0.01652EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/01/06 8:30 p.m.•8 views

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +724 more potentially affected by CVE-2020-8124 via url-parse (>=0.1.5, <=1.4.4)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.1.1, =0.0.1, =0.1.0, =0.0.0-4, =0.0.1, =1.2.5, =1.5.0, =0.1.0, =0.1.7 and more Source cves: CVE-2020-8124 Source advisory: OSV:GHSA-46C4-8WRP-J99V...

5.3CVSS7.2AI score0.01652EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/01/06 8:30 p.m.•54 views

Improper Validation and Sanitization in url-parse

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

5.3CVSS5.8AI score0.01652EPSS
SaveExploits1References5Affected Software1
osv_ghsa
osv_ghsa
•added 2022/01/06 8:30 p.m.•41 views

GHSA-46C4-8WRP-J99V Improper Validation and Sanitization in url-parse

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

5.3CVSS5.9AI score0.01652EPSS
SaveExploits1References5
nodejs
nodejs
•added 2021/08/10 4:10 p.m.•77 views

Open Redirect

Overview Overview Affected versions of npm url-parse are vulnerable to URL Redirection to Untrusted Site. Impact Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior. Recommendation Upgrade to...

5CVSS4.8AI score0.02116EPSS
SaveExploits1Affected Software1
vulnersOsv
vulnersOsv
•added 2021/08/10 4:07 p.m.•10 views

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4566 more potentially affected by CVE-2021-3664 via url-parse (>=0.1.5, <=1.5.1)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-3664 Source advisory: OSV:GHSA-HH27-FFR2-F2JC...

5.3CVSS6.8AI score0.02116EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/08/10 4:07 p.m.•2 views

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4566 more potentially affected by CVE-2021-3664 via url-parse (>=0.1.5, <=1.5.1)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-3664 Source advisory: GHSA-HH27-FFR2-F2JC...

5.3CVSS0.02116EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2021/08/10 4:07 p.m.•70 views

Open redirect in url-parse

Overview Affected versions of npm url-parse are vulnerable to URL Redirection to Untrusted Site. Impact Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior...

5.3CVSS6.4AI score0.02116EPSS
SaveExploits1References8Affected Software1
osv_ghsa
osv_ghsa
•added 2021/08/10 4:07 p.m.•19 views

GHSA-HH27-FFR2-F2JC Open redirect in url-parse

Overview Affected versions of npm url-parse are vulnerable to URL Redirection to Untrusted Site. Impact Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior...

6.1CVSS7.2AI score0.02116EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2021/08/03 6:24 a.m.•87 views

CVE-2021-3664

An input validation flaw was found in the nodejs url-parse library, which incorrectly parses a URL that contains backslashes. This flaw allows an attacker to specify a relative URL and cause the browser to redirect to a malicious website. The highest threat from this vulnerability is to integrity...

5.3CVSS4.1AI score0.02116EPSS
SaveExploits2References4
osv_debian
osv_debian
•added 2021/07/26 12:15 p.m.•13 views

DEBIAN-CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

5.3CVSS6.9AI score0.02116EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/26 12:15 p.m.•32 views

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

5.3CVSS0.02116EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2021/07/26 12:15 p.m.•48 views

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

5.3CVSS6.5AI score0.02116EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/07/26 12:15 p.m.•15 views

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

5.3CVSS6.8AI score0.02116EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2021/07/26 12:15 p.m.•21 views

UBUNTU-CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

5.3CVSS6.8AI score0.02116EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2021/07/26 12:15 p.m.•51 views

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

5.3CVSS6.8AI score0.02116EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/26 12:00 a.m.•6 views

CVE-2021-3664: URL Redirection to Untrusted Site

url-parse is vulnerable to URL Redirection to Untrusted Site...

5.3CVSS8.2AI score0.02116EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
•added 2021/07/26 12:00 a.m.•3 views

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4566 more potentially affected by CVE-2021-3664 via url-parse (>=0.1.5, <=1.5.1)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-3664 Source advisory: MEND:CVE-2021-3664...

5.3CVSS0.02116EPSS
SaveExploits1
Mend
Mend
•added 2021/07/26 12:00 a.m.•6 views

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

6.9CVSS0.02116EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2021/07/26 12:00 a.m.•11 views

PT-2021-21304 · Npm +2 · Url-Parse +2

Name of the Vulnerable Software and Affected Versions: url-parse affected versions not specified Description: The issue concerns URL redirection to untrusted sites. Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or othe...

10CVSS6.3AI score0.03805EPSS
SaveExploits7References43
Rows per page
Query Builder