ionicabizau Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with ionicabizau products.
Products
- ionicabizau/parse-url6 vulnerabilities
- ionicabizau/parse-path1 vulnerability
- node-gry1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-36650MEDIUM | IonicaBizau node-gry command injectionA vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulation leads to command injection. Upgrading to version 6.0.0 is able to address this issue. The patch is named 5108446c1e23960d65e8b973f1d9486f9f9dbd6c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218019. CWE-77Jan 11, 2023 | CVSS5.5v3.1 | EPSS2.07% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3224MEDIUM | Misinterpretation of Input in ionicabizau/parse-urlMisinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0. CWE-115Sep 15, 2022 | CVSS6.1v3.1 | EPSS0.608% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2900CRITICAL | Server-Side Request Forgery (SSRF) in ionicabizau/parse-urlServer-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0. CWE-918Sep 14, 2022 | CVSS9.1v3.1 | EPSS0.941% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-0624HIGH | Authorization Bypass Through User-Controlled Key in ionicabizau/parse-pathAuthorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0. CWE-639Jun 28, 2022 | CVSS7.3v3.1 | EPSS0.871% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2216CRITICAL | Server-Side Request Forgery (SSRF) in ionicabizau/parse-urlServer-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-918Jun 27, 2022 | CVSS9.8v3.1 | EPSS1.54% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2218MEDIUM | Cross-site Scripting (XSS) - Stored in ionicabizau/parse-urlCross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-79Jun 27, 2022 | CVSS6.1v3.1 | EPSS0.863% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-0722HIGH | Exposure of Sensitive Information to an Unauthorized Actor in ionicabizau/parse-urlExposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-200Jun 27, 2022 | CVSS7.5v3.1 | EPSS1.11% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2217MEDIUM | Cross-site Scripting (XSS) - Generic in ionicabizau/parse-urlCross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-79Jun 27, 2022 | CVSS6.1v3.1 | EPSS0.961% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |