Lucene search
Veracode Vulnerability DatabaseVERACODE:34307HistoryFeb 21, 2022 - 6:18 a.m.
Authorization Bypass
2022-02-2106:18:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
authorization bypass
url-parse
validation
malicious urls
user-controlled key
software
EPSS
0.002
Percentile
57.8%
url-parse is vulnerable to authorization bypass. Because the library does not properly validate the hostname in the toString function of index.js, an attacker can redirect to malicious URLs using the user-controlled key when no port number is specified in the URL.
References
Related
debiancve
debiancve
CVE-2022-0686
2022-02-20 13:15:07
ubuntucve
ubuntucve
CVE-2022-0686
2022-02-20 00:00:00
redhatcve
redhatcve
CVE-2022-0686
2022-03-02 14:50:01
huntr
huntr
Authorization Bypass Through User-Controlled Key
2022-02-17 20:30:43
cvelist
cvelist
cnvd
cnvd
NPM url-parse authorization bypass vulnerability
2022-02-22 00:00:00
prion
prion
Authorization
2022-02-20 13:15:00
osv
osv
CVE-2022-0686
2022-02-20 13:15:07
Authorization Bypass Through User-Controlled Key in url-parse
2022-02-21 00:00:21
node-url-parse - security update
2023-02-23 00:00:00
nvd
nvd
CVE-2022-0686
2022-02-20 13:15:07
cve
cve
CVE-2022-0686
2022-02-20 13:15:07
github
github
Authorization Bypass Through User-Controlled Key in url-parse
2022-02-21 00:00:21
debian
debian
[SECURITY] [DLA 3336-1] node-url-parse security update
2023-02-23 00:55:13
openvas
openvas
Debian: Security Advisory (DLA-3336-1)
2023-02-23 00:00:00
Ubuntu: Security Advisory (USN-5973-1)
2023-03-28 00:00:00
nessus
nessus
Debian DLA-3336-1 : node-url-parse - LTS security update
2023-02-23 00:00:00
ubuntu
ubuntu
url-parse vulnerabilities
2023-03-27 00:00:00
ibm
ibm
redhat
redhat