Veracode Vulnerability DatabaseVERACODE:46063URL Protocol Bypass
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.9%
katex is vulnerable to URL Protocol Bypass. The vulnerability is due to insufficient validation of URL protocols by the KaTeX library’s trust option. It allows malicious inputs containing URLs with uppercase characters in the protocol to bypass the blacklist mechanism.
Related
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.9%