Lucene search
Veracode Vulnerability DatabaseVERACODE:29458HistoryFeb 23, 2021 - 4:45 a.m.
Insecure URL Handling
2021-02-2304:45:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
insecure urls
relative path
access controls bypass
EPSS
0.003
Percentile
68.3%
urijs does not securely handle URLs. The backslash is mishandled and causes http:\/ to be interpreted as a relative path. This can potentially result in bypass of access controls.
Related
redhatcve
redhatcve
CVE-2021-27516
2021-03-03 10:34:38
cvelist
cvelist
CVE-2021-27516
2021-02-21 23:29:56
osv
osv
CVE-2021-27516
2021-02-22 00:15:12
URIjs Hostname spoofing via backslashes in URL
2021-03-01 20:03:53
cve
cve
CVE-2021-27516
2021-02-22 00:15:12
prion
prion
Path traversal
2021-02-22 00:15:00
nodejs
nodejs
Hostname spoofing via backslashes in URL
2021-03-01 20:43:24
github
github
URIjs Hostname spoofing via backslashes in URL
2021-03-01 20:03:53
nvd
nvd
CVE-2021-27516
2021-02-22 00:15:12
huntr
huntr
Open Redirect in ionicabizau/parse-url
2021-07-10 14:13:37
Open Redirect in ionicabizau/parse-url
2021-07-08 08:10:25
Open Redirect in ionicabizau/parse-path
2021-07-08 08:08:33
redhat
redhat