Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
Weakness
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Url-parse | Url-parse_project | * | 1.4.3 (excluding) |
| Red Hat Quay 3 | RedHat | quay/quay-rhel8:v3.6.0-62 | * |
| Node-url-parse | Ubuntu | bionic | * |
| Node-url-parse | Ubuntu | cosmic | * |
| Node-url-parse | Ubuntu | disco | * |
| Node-url-parse | Ubuntu | eoan | * |
| Node-url-parse | Ubuntu | esm-apps-legacy/xenial | * |
| Node-url-parse | Ubuntu | esm-apps/bionic | * |
| Node-url-parse | Ubuntu | esm-apps/xenial | * |
| Node-url-parse | Ubuntu | groovy | * |
| Node-url-parse | Ubuntu | hirsute | * |
| Node-url-parse | Ubuntu | impish | * |
| Node-url-parse | Ubuntu | lunar | * |
| Node-url-parse | Ubuntu | mantic | * |
| Node-url-parse | Ubuntu | upstream | * |
| Node-url-parse | Ubuntu | xenial | * |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/127.html
- https://cwe.mitre.org/data/definitions/143.html
- https://cwe.mitre.org/data/definitions/144.html
- https://cwe.mitre.org/data/definitions/668.html
- https://cwe.mitre.org/data/definitions/87.html
References
- https://github.com/unshiftio/url-parse/commit/53b1794e54d0711ceb52505e0f74145270570d5a
- https://github.com/unshiftio/url-parse/commit/d7b582ec1243e8024e60ac0b62d2569c939ef5de
- https://hackerone.com/reports/384029
- https://github.com/unshiftio/url-parse/commit/53b1794e54d0711ceb52505e0f74145270570d5a
- https://github.com/unshiftio/url-parse/commit/d7b582ec1243e8024e60ac0b62d2569c939ef5de
- https://hackerone.com/reports/384029