Description
Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.
Remediation
References
https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8
https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388
Related Vulnerabilities
CVE-2020-7622 Vulnerability in maven package io.jooby:jooby-netty
CVE-2020-11057 Vulnerability in maven package org.xwiki.platform:xwiki-platform-dashboard-macro
CVE-2021-21384 Vulnerability in npm package shescape
CVE-2020-17516 Vulnerability in maven package org.apache.cassandra:cassandra-all
CVE-2019-10795 Vulnerability in maven package org.webjars.npm:undefsafe