CVE Vulnerabilities

CVE-2021-27515

Published: Feb 22, 2021 | Modified: Nov 21, 2024
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
5.3 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Ubuntu
LOW

url-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path.

Affected Software

Name Vendor Start Version End Version
Url-parse Url-parse_project * 1.5.0 (excluding)
Red Hat Quay 3 RedHat quay/quay-rhel8:v3.6.0-62 *
Node-url-parse Ubuntu bionic *
Node-url-parse Ubuntu esm-apps/xenial *
Node-url-parse Ubuntu focal *
Node-url-parse Ubuntu groovy *
Node-url-parse Ubuntu hirsute *
Node-url-parse Ubuntu impish *
Node-url-parse Ubuntu lunar *
Node-url-parse Ubuntu mantic *
Node-url-parse Ubuntu trusty *
Node-url-parse Ubuntu xenial *

References