CVE-2020-8124
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.7%
exploitation probability
1.7%top 25% of all CVEs
observed exploitation
nono source reports it
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Affected products
n/a · url-parseReferences
https://hackerone.com/reports/496293