CVE-2022-0639CWE-639

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Medium · published February 17, 2022

CVSS v3.0
6.5
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01535 · 74.6th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2022-02-17T00:00Z
EPSS history
Timeline
  • 17 FEB 00:00Z
    Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
    cvelistv5