Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22374
HistoryJan 28, 2020 - 3:29 a.m.

Cross-Site Scripting (XSS)

2020-01-2803:29:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.001

Percentile

41.8%

url-parse is vulnerable to cross-site scripting (XSS). The vulnerability exists as the unsanitized value of address in index.js could be used to bypass validation checks when used in the browser.