CVE-2018-3774
node-url-parse: Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF,...
CVE-2018-3774 is fixed in node-url-parse on 1 platform by node-url-parse 1.2.0-1ubuntu0.1 (version 1.2.0-1ubuntu0.1), released February 21, 2022. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0381
90th percentile
Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| node-url-parse · Ubuntu 18.04.6 LTS (bionic) | 1.2.0-1ubuntu0.1 | node-url-parse 1.2.0-1ubuntu0.1 | Feb 21, 2022 |