Improper authorization control for web services In urijs
Description
Authorization Bypass Through User-Controlled Key in urijs Attacker can use case-insensitive protocol schemes like HTTP, htTP, HTtp etc. in order to bypass the patch for CVE-2021-3647.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Aliases
1. 2. 3. 4.
References
1. 2. 3.