Description
Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.
Remediation
References
https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8
https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388
Related Vulnerabilities
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-beam-sql
CVE-2018-3721 Vulnerability in npm package lodash.mergewith
CVE-2021-41109 Vulnerability in npm package parse-server
CVE-2022-47105 Vulnerability in maven package org.jeecgframework.boot:jeecg-module-system
CVE-2020-26274 Vulnerability in npm package systeminformation