Artfical
Security Intelligence
Türkçe
English
Deutsch
Français
Español
Русский
العربية
中文
日本語
한국어
Português
Italiano
فارسی
हिन्दी
Nederlands
Polski
Українська
Ελληνικά
Azərbaycan
Svenska
Indonesia
Tiếng Việt
ภาษาไทย
Română
Čeština
Magyar
עברית
Suomi
Norsk
Dansk
← Database
CVE-2022-0639
MEDIUM
CVSS:
5.3
Published: 2022-02-17
Modified: 2026-06-17
Description
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
Affected Platforms
Url-Parse Project Url-Parse
Weakness Type
CWE-639, CWE-639
References
https://github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62…
https://huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
https://github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62…
https://huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html