url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5973-1 advisory.

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     cause a denial of service, or to perform a server-side request forgery attack or open redirect attack.
    (CVE-2018-3774)

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     bypass input validation. This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2020-8124)

    Yaniv Nizry discovered that url-parse incorrectly handled certain inputs. If a user or an automated system     were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue     to cause a denial of service, or to perform a server-side request forgery attack or open redirect attack.
    This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-27515)

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     cause a denial of service, or to perform a server-side request forgery attack or open redirect attack.
    This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3664)

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     bypass authorization. This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0512,     CVE-2022-0639, CVE-2022-0691)

    Rohan Sharma discovered that url-parse incorrectly handled certain inputs. If a user or an automated     system were tricked into opening a specially crafted input file, a remote attacker could possibly use this     issue to bypass authorization. This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2022-0686)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3336 advisory.

  - url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a     relative path. (CVE-2021-27515)

  - url-parse is vulnerable to URL Redirection to Untrusted Site (CVE-2021-3664)

  - Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6. (CVE-2022-0512)

  - Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7. (CVE-2022-0639)

  - Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8. (CVE-2022-0686)

  - Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9. (CVE-2022-0691)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
173433	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : url-parse vulnerabilities (USN-5973-1)	Nessus	Ubuntu Local Security Checks	critical
171837	Debian DLA-3336-1 : node-url-parse - LTS security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2021-27515

medium

Tenable Plugins

critical

critical