Vulnerability Details CVE-2020-8910
A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.7%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
- https://github.com/google/closure-library/commit/294fc00b01d248419d8f8de37580adf2a0024fc9
- https://github.com/google/closure-library/releases/tag/v20200315
- https://github.com/google/closure-library/commit/294fc00b01d248419d8f8de37580adf2a0024fc9
- https://github.com/google/closure-library/releases/tag/v20200315
Products affected by CVE-2020-8910
-
cpe:2.3:a:google:closure_library:-
-
cpe:2.3:a:google:closure_library:20160106
-
cpe:2.3:a:google:closure_library:20160119
-
cpe:2.3:a:google:closure_library:20160125
-
cpe:2.3:a:google:closure_library:20160208
-
cpe:2.3:a:google:closure_library:20160315
-
cpe:2.3:a:google:closure_library:20160517
-
cpe:2.3:a:google:closure_library:20160619
-
cpe:2.3:a:google:closure_library:20160713
-
cpe:2.3:a:google:closure_library:20160822
-
cpe:2.3:a:google:closure_library:20160911
-
cpe:2.3:a:google:closure_library:20161024
-
cpe:2.3:a:google:closure_library:20161201
-
cpe:2.3:a:google:closure_library:20170124
-
cpe:2.3:a:google:closure_library:20170218
-
cpe:2.3:a:google:closure_library:20170409
-
cpe:2.3:a:google:closure_library:20170521
-
cpe:2.3:a:google:closure_library:20170626
-
cpe:2.3:a:google:closure_library:20170806
-
cpe:2.3:a:google:closure_library:20170910
-
cpe:2.3:a:google:closure_library:20171112
-
cpe:2.3:a:google:closure_library:20171203
-
cpe:2.3:a:google:closure_library:20180204
-
cpe:2.3:a:google:closure_library:20180405
-
cpe:2.3:a:google:closure_library:20180506
-
cpe:2.3:a:google:closure_library:20180716
-
cpe:2.3:a:google:closure_library:20180805
-
cpe:2.3:a:google:closure_library:20180910
-
cpe:2.3:a:google:closure_library:20190121
-
cpe:2.3:a:google:closure_library:20190215
-
cpe:2.3:a:google:closure_library:20190301
-
cpe:2.3:a:google:closure_library:20190325
-
cpe:2.3:a:google:closure_library:20190415
-
cpe:2.3:a:google:closure_library:20190513
-
cpe:2.3:a:google:closure_library:20190528
-
cpe:2.3:a:google:closure_library:20190618
-
cpe:2.3:a:google:closure_library:20190709
-
cpe:2.3:a:google:closure_library:20190729
-
cpe:2.3:a:google:closure_library:20190819
-
cpe:2.3:a:google:closure_library:20190909
-
cpe:2.3:a:google:closure_library:20190929
-
cpe:2.3:a:google:closure_library:20191027
-
cpe:2.3:a:google:closure_library:20191111
-
cpe:2.3:a:google:closure_library:20200101
-
cpe:2.3:a:google:closure_library:20200112
-
cpe:2.3:a:google:closure_library:20200204
-
cpe:2.3:a:google:closure_library:20200224