ionicabizau Vulnerabilities and Affected Products
Vulnerabilities associated with ionicabizau/parse-url.
Products
Clear product- ionicabizau/parse-url6 vulnerabilities
- ionicabizau/parse-path1 vulnerability
- node-gry1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-3224MEDIUM | Misinterpretation of Input in ionicabizau/parse-urlMisinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0. CWE-115Sep 15, 2022 | CVSS6.1v3.1 | EPSS0.608% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2900CRITICAL | Server-Side Request Forgery (SSRF) in ionicabizau/parse-urlServer-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0. CWE-918Sep 14, 2022 | CVSS9.1v3.1 | EPSS0.941% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2216CRITICAL | Server-Side Request Forgery (SSRF) in ionicabizau/parse-urlServer-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-918Jun 27, 2022 | CVSS9.8v3.1 | EPSS1.54% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2218MEDIUM | Cross-site Scripting (XSS) - Stored in ionicabizau/parse-urlCross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-79Jun 27, 2022 | CVSS6.1v3.1 | EPSS0.863% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-0722HIGH | Exposure of Sensitive Information to an Unauthorized Actor in ionicabizau/parse-urlExposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-200Jun 27, 2022 | CVSS7.5v3.1 | EPSS1.11% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2217MEDIUM | Cross-site Scripting (XSS) - Generic in ionicabizau/parse-urlCross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-79Jun 27, 2022 | CVSS6.1v3.1 | EPSS0.961% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |