Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:36186
HistoryJun 28, 2022 - 12:11 p.m.

Server-side Request Forgery (SSRF)

2022-06-2812:11:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
server-side request forgery
parseurl function
remote attackers

EPSS

0.002

Percentile

57.1%

JSON

parse-url is vulnerable to server-side request forgery (SSRF) attacks. Improper handling of user credentials allow remote attackers to bypass hostname checks and perform SSRF attacks via the vulnerable parseUrl function.

Related

prion 1
huntr 1
cvelist 1
osv 2
github 1
nvd 1
cve 1
prion
prion
Server side request forgery (ssrf)
2022-06-27 12:15:00
huntr
huntr
SSRF via Improper Input Validation
2022-06-17 03:51:45
cvelist
cvelist
CVE-2022-2216 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
2022-06-27 12:10:18
osv
osv
CVE-2022-2216
2022-06-27 12:15:07
Server-Side Request Forgery in parse-url
2022-06-28 00:01:02
github
github
Server-Side Request Forgery in parse-url
2022-06-28 00:01:02
nvd
nvd
CVE-2022-2216
2022-06-27 12:15:07
cve
cve
CVE-2022-2216
2022-06-27 12:15:07

EPSS

0.002

Percentile

57.1%

JSON
Related for VERACODE:36186
prion1huntr1cvelist1osv2github1nvd1cve1