CVE-2020-8124CWE-20
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks
published February 4, 2020
What it is
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01652 · 76.3th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2020-02-04T19:08Z
EPSS history
Timeline