Lucene search
Ubuntu.comUB:CVE-2022-0691HistoryFeb 21, 2022 - 12:00 a.m.
CVE-2022-0691
2022-02-2100:00:00
ubuntu.com
ubuntu.com
15
0.003 Low
EPSS
Percentile
69.7%
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to
1.5.9.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | node-url-parse | < 1.2.0-1ubuntu0.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | node-url-parse | < 1.4.7-3ubuntu0.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | node-url-parse | < 1.0.5-2ubuntu0.1~esm2 | UNKNOWN |
References
github.com/unshiftio/url-parse/commit/0e3fb542d60ddbf6933f22eb9b1e06e25eaa5b63 (1.5.9)
huntr.dev/bounties/57124ed5-4b68-4934-8325-2c546257f2e4
launchpad.net/bugs/cve/CVE-2022-0691
nvd.nist.gov/vuln/detail/CVE-2022-0691
security-tracker.debian.org/tracker/CVE-2022-0691
ubuntu.com/security/notices/USN-5973-1
www.cve.org/CVERecord?id=CVE-2022-0691
Related
cve
cve
CVE-2022-0691
2022-02-21 09:15:00
veracode
veracode
Authorization Bypass
2022-02-22 06:06:42
debiancve
debiancve
CVE-2022-0691
2022-02-21 09:15:00
osv
osv
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
2022-02-22 00:00:30
CVE-2022-0691
2022-02-21 09:15:07
node-url-parse - security update
2023-02-23 00:00:00
github
github
cvelist
cvelist
prion
prion
Authorization
2022-02-21 09:15:00
huntr
huntr
Authorization Bypass Through User-Controlled Key
2022-02-19 04:00:10
redhatcve
redhatcve
CVE-2022-0691
2022-03-02 14:50:01
nessus
nessus
Debian DLA-3336-1 : node-url-parse - LTS security update
2023-02-23 00:00:00
debian
debian
[SECURITY] [DLA 3336-1] node-url-parse security update
2023-02-23 00:55:38
openvas
openvas
Debian: Security Advisory (DLA-3336-1)
2023-02-23 00:00:00
Ubuntu: Security Advisory (USN-5973-1)
2023-03-28 00:00:00
ubuntu
ubuntu
url-parse vulnerabilities
2023-03-27 00:00:00
ibm
ibm
redhat
redhat