CVE-2021-27515 @ Npm-url-parse-1.4.7

[Abdul1110]

Vulnerable Package issue exists @ Npm-url-parse-1.4.7 in branch master

url-parse before 1.5.0 fails to parse the URL correctly when using backslash in the protocol e.g. http:\/. Browsers accept backslashes after the protocol, and treat it as a normal slash. While url-parse before 1.5.0 sees it as a relative path. This might cause various vulnerabilities in case of validating a URL with the affected versions.

Namespace: Abdul1110
Repository: TEST_ORION
Repository Url: https://github.com/Abdul1110/TEST_ORION
CxAST-Project: Abdul1110/TEST_ORION
CxAST platform scan: 19490220-b272-4b92-94fa-50af22248f60
Branch: master
Application: TEST_ORION
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-20

---

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: NONE
Remediation Upgrade Recommendation: 1.5.2

---

References
Advisory
Commit
Pull request
Release Note
Advisory