Description
Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.
Remediation
References
https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388
https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8
Related Vulnerabilities
CVE-2021-34428 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2020-7760 Vulnerability in maven package org.webjars.bowergithub.components:codemirror
CVE-2023-33201 Vulnerability in maven package org.bouncycastle:bcprov-debug-jdk15to18
CVE-2023-44487 Vulnerability in maven package org.eclipse.jetty.http2:http2-common