Lucene search
GoogleOSV:CVE-2022-25839HistoryMar 11, 2022 - 8:15 p.m.
CVE-2022-25839
2022-03-1120:15:09
Google
osv.dev
4
cve-2022-25839
improper input validation
hostname spoofing
software
EPSS
0.001
Percentile
28.9%
The package url-js before 2.1.0 are vulnerable to Improper Input Validation due to improper parsing, which makes it is possible for the hostname to be spoofed. http://\\\\localhost and http://localhost are the same URL. However, the hostname is not parsed as localhost, and the backslash is reflected as it is.
Related
veracode
veracode
Improper Input Validation
2022-03-14 13:51:53
osv
osv
Improper Input Validation in url-js
2022-03-12 00:00:26
prion
prion
Input validation
2022-03-11 20:15:00
cvelist
cvelist
CVE-2022-25839 Improper Input Validation
2022-03-11 20:00:15
nvd
nvd
CVE-2022-25839
2022-03-11 20:15:09
github
github
Improper Input Validation in url-js
2022-03-12 00:00:26
cve
cve
CVE-2022-25839
2022-03-11 20:15:09