Description
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.
Remediation
References
https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
https://huntr.dev/bounties/2490ef6d-5577-4714-a4dd-9608251b4226
Related Vulnerabilities
CVE-2022-1274 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2022-2900 Vulnerability in npm package parse-url
CVE-2011-2088 Vulnerability in maven package org.apache.struts.xwork:xwork-core
CVE-2022-26612 Vulnerability in maven package org.apache.hadoop:hadoop-common
CVE-2021-25929 Vulnerability in maven package org.opennms:opennms-webapp