Lucene search
GoogleOSV:GHSA-9M6J-FCG5-2442HistoryMay 06, 2021 - 4:10 p.m.
Path traversal in url-parse
2021-05-0616:10:51
Google
osv.dev
23
path traversal
url-parse
backslash
mishandling
uri
relative path
software
EPSS
0.002
Percentile
54.6%
url-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path.
References
advisory.checkmarx.net/advisory/CX-2021-4306
github.com/unshiftio/url-parse
github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0
github.com/unshiftio/url-parse/compare/1.4.7...1.5.0
github.com/unshiftio/url-parse/pull/197
lists.debian.org/debian-lts-announce/2023/02/msg00030.html
nvd.nist.gov/vuln/detail/CVE-2021-27515
Related
cvelist
cvelist
CVE-2021-27515
2021-02-21 00:00:00
osv
osv
CVE-2021-27515
2021-02-22 00:15:12
node-url-parse - security update
2023-02-23 00:00:00
node-url-parse vulnerabilities
2023-03-27 14:59:16
veracode
veracode
Insecure URL Validation
2021-02-23 06:23:00
ubuntucve
ubuntucve
CVE-2021-27515
2021-02-22 00:00:00
debiancve
debiancve
CVE-2021-27515
2021-02-22 00:15:12
prion
prion
Path traversal
2021-02-22 00:15:00
nodejs
nodejs
Path traversal
2021-05-06 16:15:11
github
github
Path traversal in url-parse
2021-05-06 16:10:51
nvd
nvd
CVE-2021-27515
2021-02-22 00:15:12
cve
cve
CVE-2021-27515
2021-02-22 00:15:12
huntr
huntr
Open Redirect in tjenkinson/url-toolkit
2021-07-08 08:01:11
Open Redirect in unshiftio/url-parse
2021-07-06 07:53:15
Open Redirect in ionicabizau/parse-url
2021-07-10 14:13:37
redhatcve
redhatcve
CVE-2021-27515
2021-03-03 10:34:04
CVE-2021-3664
2021-08-03 06:24:49
nessus
nessus
Debian DLA-3336-1 : node-url-parse - LTS security update
2023-02-23 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3336-1)
2023-02-23 00:00:00
Ubuntu: Security Advisory (USN-5973-1)
2023-03-28 00:00:00
debian
debian
[SECURITY] [DLA 3336-1] node-url-parse security update
2023-02-23 00:55:13
ubuntu
ubuntu
url-parse vulnerabilities
2023-03-27 00:00:00
ibm
ibm
redhat
redhat