Lucene search

K
osvGoogleOSV:GHSA-VH5W-FG69-RC8M
HistoryMay 07, 2021 - 4:06 p.m.

Improper Input Validation in Google Closure Library

2021-05-0716:06:34
Google
osv.dev
9
google closure library
url parsing
input validation
version v20200315
mitigation
software

EPSS

0.001

Percentile

36.4%

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation – update your library to version v20200315.

EPSS

0.001

Percentile

36.4%