Related Vulnerabilities: CVE-2022-0686  

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

Description

The MITRE CVE dictionary describes this issue as:

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

Additional Information

  • Bugzilla 2060018: CVE-2022-0686 npm-url-parse: uthorization bypass through user-controlled key
  • CWE-639: Authorization Bypass Through User-Controlled Key
  • FAQ: Frequently asked questions about CVE-2022-0686