Server-side request forgery (SSRF) In node-forge
Description
Open Redirect in node-forge
parseUrl functionality in node-forge mishandles certain uses of backslash such as https:/\/\/\ and interprets the URI as a relative path.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 npm | 1.0.0 | ||
npm | 1.0.0 |
Aliases
1. 2. 3. 4.
References
1. 2.