by Kastro
Paper/Archive/CVE-2022-3224

CVE-2022-3224

ionicabizau ionicabizau/parse-url — Misinterpretation of Input in ionicabizau/parse-url

EPSS 0.8%CVSS 9.4
critical.is priorityof 100
40
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 56.4.564 × 2011.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.

Affected

ProductAffectedFixed inSource
ionicabizau/parse-urlunspecified – < 8.1.08.1.0CNA

Scores by source

@huntrdev (CNA)9.4CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

References

refhuntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62refgithub.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e