description: Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
problem types: Forced Browsing (CWE-425)
affected:
{
product: url-parse
vendor: HackerOne
versions:
status: affected, version: 1.4.3
}