Description
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.
Remediation
References
https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
https://huntr.dev/bounties/2490ef6d-5577-4714-a4dd-9608251b4226
Related Vulnerabilities
CVE-2022-30500 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2022-25354 Vulnerability in npm package set-in
CVE-2011-1772 Vulnerability in maven package org.apache.struts.xwork:xwork-core
CVE-2021-40690 Vulnerability in maven package org.apache.santuario:xmlsec
CVE-2022-26112 Vulnerability in maven package org.apache.pinot:pinot-spi