Description

Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.

Remediation

References

https://github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e

https://huntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62

Related Vulnerabilities

CVE-2016-4432 Vulnerability in maven package org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol

CVE-2022-29567 Vulnerability in maven package com.vaadin:vaadin

CVE-2021-21174 Vulnerability in npm package electron

CVE-2022-46175 Vulnerability in maven package org.webjars.bower:json5

CVE-2022-25296 Vulnerability in npm package bodymen

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Patch Third Party Advisory Exploit Issue Tracking NVD-CWE-noinfo