Security Advisory

CVE-2018-3774

10
CRITICAL

Vulnerability Description

Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
Published Date August 12, 2018
Official Source NIST NVD Advisory