Description

Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.

Remediation

References

https://github.com/unshiftio/url-parse/commit/53b1794e54d0711ceb52505e0f74145270570d5a

https://github.com/unshiftio/url-parse/commit/d7b582ec1243e8024e60ac0b62d2569c939ef5de

https://hackerone.com/reports/384029

Related Vulnerabilities

CVE-2023-39345 Vulnerability in npm package @strapi/strapi

CVE-2020-17533 Vulnerability in maven package org.apache.accumulo:accumulo-core

CVE-2022-43406 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

CVE-2023-3223 Vulnerability in maven package io.undertow:undertow-servlet

CVE-2016-5016 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-common

Severity

Critical

Classification

CWE-425 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tags

Vendor Advisory Issue Tracking Third Party Advisory