Description
url-parse prior to version 1.5.8 is vulnerable to Authorization Bypass Through User-Controlled Key.
Recommendation
Update the url-parse package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.5.8
- Patched version(s): 1.5.8
References
Could your website be exposed too?
SmartScanner can check your website for Authorization Bypass Through User-Controlled Key in url-parse and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Authorization Bypass Through User-Controlled Key in urijs - CVE-2022-0613
- StudioCMS has Authorization Bypass Through User-Controlled Key - CVE-2026-24134
- Authorization bypass in url-parse - CVE-2022-0512
- Authorization Bypass in parse-path - CVE-2022-0624
You might also like:
See something that needs correcting? Let us knowUpdated November 29, 2023