Skip to content

CVE-2021-3664 @ Npm-url-parse-1.4.7 #49

@cx-abdul-ansari

Description

@cx-abdul-ansari

Vulnerable Package issue exists @ Npm-url-parse-1.4.7 in branch master

The versions of url-parse before 1.5.2 are vulnerable to URL Redirection to Untrusted Site

Namespace: Abdul1110
Repository: TEST_ORION
Repository Url: https://github.com/Abdul1110/TEST_ORION
CxAST-Project: Abdul1110/TEST_ORION
CxAST platform scan: 19490220-b272-4b92-94fa-50af22248f60
Branch: master
Application: TEST_ORION
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-601


Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: NONE
Remediation Upgrade Recommendation: 1.5.2


References
Disclosure
Advisory
Issue
Issue
Pull request
Commit

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions