Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36185
HistoryJun 28, 2022 - 11:46 a.m.

Cross-site Scripting (XSS)

2022-06-2811:46:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
xss
parse-url
input validation
attack
vulnerability

EPSS

0.001

Percentile

30.0%

parse-url is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of input validation which allows an attacker to inject and execute malicious script via URL parameter.

EPSS

0.001

Percentile

30.0%