Description
Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.
Remediation
References
https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8
https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388
Related Vulnerabilities
CVE-2020-13444 Vulnerability in maven package com.liferay:com.liferay.dynamic.data.mapping.service
CVE-2014-3652 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2022-39975 Vulnerability in maven package com.liferay.portal:release.portal.bom
CVE-2021-23899 Vulnerability in maven package com.mikesamuel:json-sanitizer
CVE-2021-38294 Vulnerability in maven package org.apache.storm:storm-server