CVE Vulnerability

CVE-2022-3224

Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e Patch Third Party Advisory
https://huntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62 Exploit Issue Tracking
Configurations

Configuration 1

cpe:2.3:a:parse-url_project:parse-url:*:*:*:*:*:*:*:*
Information

Published : 2022-09-15 12:15

Updated : 2022-09-17 02:34

NVD link : CVE-2022-3224

Mitre link : CVE-2022-3224

Products Affected
No products.
CWE
CWE-115

Misinterpretation of Input