Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2021-27515
url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.002
EPSS Ranking
40.9%
CVSS Severity
CVSS v3 Score
5.3
CVSS v2 Score
5.0
References
https://advisory.checkmarx.net/advisory/CX-2021-4306
https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0
https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.0
https://github.com/unshiftio/url-parse/pull/197
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
https://advisory.checkmarx.net/advisory/CX-2021-4306
https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0
https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.0
https://github.com/unshiftio/url-parse/pull/197
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
Products affected by CVE-2021-27515
Url-Parse Project
»
Url-Parse
»
Version:
0.0.4
cpe:2.3:a:url-parse_project:url-parse:0.0.4
Url-Parse Project
»
Url-Parse
»
Version:
0.1.0
cpe:2.3:a:url-parse_project:url-parse:0.1.0
Url-Parse Project
»
Url-Parse
»
Version:
0.1.1
cpe:2.3:a:url-parse_project:url-parse:0.1.1
Url-Parse Project
»
Url-Parse
»
Version:
0.1.2
cpe:2.3:a:url-parse_project:url-parse:0.1.2
Url-Parse Project
»
Url-Parse
»
Version:
0.1.3
cpe:2.3:a:url-parse_project:url-parse:0.1.3
Url-Parse Project
»
Url-Parse
»
Version:
0.1.4
cpe:2.3:a:url-parse_project:url-parse:0.1.4
Url-Parse Project
»
Url-Parse
»
Version:
0.1.5
cpe:2.3:a:url-parse_project:url-parse:0.1.5
Url-Parse Project
»
Url-Parse
»
Version:
0.2.0
cpe:2.3:a:url-parse_project:url-parse:0.2.0
Url-Parse Project
»
Url-Parse
»
Version:
0.2.1
cpe:2.3:a:url-parse_project:url-parse:0.2.1
Url-Parse Project
»
Url-Parse
»
Version:
0.2.2
cpe:2.3:a:url-parse_project:url-parse:0.2.2
Url-Parse Project
»
Url-Parse
»
Version:
0.2.3
cpe:2.3:a:url-parse_project:url-parse:0.2.3
Url-Parse Project
»
Url-Parse
»
Version:
1.0.0
cpe:2.3:a:url-parse_project:url-parse:1.0.0
Url-Parse Project
»
Url-Parse
»
Version:
1.0.1
cpe:2.3:a:url-parse_project:url-parse:1.0.1
Url-Parse Project
»
Url-Parse
»
Version:
1.0.2
cpe:2.3:a:url-parse_project:url-parse:1.0.2
Url-Parse Project
»
Url-Parse
»
Version:
1.0.3
cpe:2.3:a:url-parse_project:url-parse:1.0.3
Url-Parse Project
»
Url-Parse
»
Version:
1.0.4
cpe:2.3:a:url-parse_project:url-parse:1.0.4
Url-Parse Project
»
Url-Parse
»
Version:
1.0.5
cpe:2.3:a:url-parse_project:url-parse:1.0.5
Url-Parse Project
»
Url-Parse
»
Version:
1.1.0
cpe:2.3:a:url-parse_project:url-parse:1.1.0
Url-Parse Project
»
Url-Parse
»
Version:
1.1.1
cpe:2.3:a:url-parse_project:url-parse:1.1.1
Url-Parse Project
»
Url-Parse
»
Version:
1.1.2
cpe:2.3:a:url-parse_project:url-parse:1.1.2
Url-Parse Project
»
Url-Parse
»
Version:
1.1.3
cpe:2.3:a:url-parse_project:url-parse:1.1.3
Url-Parse Project
»
Url-Parse
»
Version:
1.1.4
cpe:2.3:a:url-parse_project:url-parse:1.1.4
Url-Parse Project
»
Url-Parse
»
Version:
1.1.5
cpe:2.3:a:url-parse_project:url-parse:1.1.5
Url-Parse Project
»
Url-Parse
»
Version:
1.1.6
cpe:2.3:a:url-parse_project:url-parse:1.1.6
Url-Parse Project
»
Url-Parse
»
Version:
1.1.7
cpe:2.3:a:url-parse_project:url-parse:1.1.7
Url-Parse Project
»
Url-Parse
»
Version:
1.1.8
cpe:2.3:a:url-parse_project:url-parse:1.1.8
Url-Parse Project
»
Url-Parse
»
Version:
1.1.9
cpe:2.3:a:url-parse_project:url-parse:1.1.9
Url-Parse Project
»
Url-Parse
»
Version:
1.2.0
cpe:2.3:a:url-parse_project:url-parse:1.2.0
Url-Parse Project
»
Url-Parse
»
Version:
1.3.0
cpe:2.3:a:url-parse_project:url-parse:1.3.0
Url-Parse Project
»
Url-Parse
»
Version:
1.4.0
cpe:2.3:a:url-parse_project:url-parse:1.4.0
Url-Parse Project
»
Url-Parse
»
Version:
1.4.1
cpe:2.3:a:url-parse_project:url-parse:1.4.1
Url-Parse Project
»
Url-Parse
»
Version:
1.4.2
cpe:2.3:a:url-parse_project:url-parse:1.4.2
Url-Parse Project
»
Url-Parse
»
Version:
1.4.3
cpe:2.3:a:url-parse_project:url-parse:1.4.3
Url-Parse Project
»
Url-Parse
»
Version:
1.4.4
cpe:2.3:a:url-parse_project:url-parse:1.4.4
Url-Parse Project
»
Url-Parse
»
Version:
1.4.5
cpe:2.3:a:url-parse_project:url-parse:1.4.5
Url-Parse Project
»
Url-Parse
»
Version:
1.4.6
cpe:2.3:a:url-parse_project:url-parse:1.4.6
Url-Parse Project
»
Url-Parse
»
Version:
1.4.7
cpe:2.3:a:url-parse_project:url-parse:1.4.7
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved