CVE-2020-8124CWE-20

CVE-2020-8124: vulnerability in url-parse

Published · Updated

Follow this CVE+ Monitor url-parse+ Monitor node-url-parse

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Affected products
n/a · url-parse