Misinterpretation of Input in org.webjars.npm:parse-url

CVE-2022-3224

org.webjars.npm:parse-url
parse-url

Medium

6.1/10

Summary

Misinterpretation of Input in ionicabizau/parse-url versions prior to 8.1.0.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: CHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: LOW
Availability Impact: NONE

CWE-115 - Misinterpretation of Input

The software misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.

References

Advisory Timeline

Published Sep 15, 2022