Authorization Bypass

🗓️ 15 Feb 2022 09:18:47Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

Authorization Bypass in url-pars

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to Using Components with Known Vulnerabilities	25 Jul 202213:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	16 Aug 202215:59	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: High severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:57	–	ibm
Huntr	in unshiftio/url-parse	7 Jan 202218:23	–	huntr
ATTACKERKB	CVE-2022-0512	14 Feb 202216:15	–	attackerkb
Circl	CVE-2022-0512	14 Feb 202218:32	–	circl
CNNVD	NPM url-parse 安全漏洞	14 Feb 202200:00	–	cnnvd
CVE	CVE-2022-0512	14 Feb 202200:00	–	cve

Vulners

Node

node-url-parse node-url-parseMatch1.4.7+repack-1debian

AND

debian debian_linuxMatch999

OR

node-url-parse node-url-parseMatch1.5.3-1debian

AND

debian debian_linuxMatch12

OR

node-url-parse node-url-parseMatch1.2.0-2+deb10u1debian

AND

debian debian_linuxMatch10

OR

node-url-parse node-url-parseMatch1.4.7+repack-1debian

AND

debian debian_linuxMatch11

OR

url-parse_project url-parseRange1.0.0–1.5.5js

Source	Link
github	www.github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40
github	www.github.com/unshiftio/url-parse/blob/master/index.js
huntr	www.huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b/
github	www.github.com/unshiftio/url-parse/pull/223
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00030.html
github	www.github.com/advisories/GHSA-rqff-837h-mm52
huntr	www.huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b

23 Feb 2023 06:17Current

2.5Low risk

Vulners AI Score2.5

CVSS 35.3 - 8.8

CVSS 25

EPSS0.00022

authorization bypass url-parse index.js user information software