Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36204
HistoryJun 29, 2022 - 3:24 p.m.

Authorization Bypass

2022-06-2915:24:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.001 Low

EPSS

Percentile

38.1%

Parse-url is vulnerable to Authorization Bypass. The parseUrl function is unable to detect the correct host, leading to open redirect or server side request forgery causing information disclosure.

CPENameOperatorVersion
parse-pathle4.0.4
parse-pathle4.0.4

0.001 Low

EPSS

Percentile

38.1%