GitHub Advisoryadvisory · npm

GHSA-vh5w-fg69-rc8m Improper Input Validation in Google Closure Library

MEDIUM Published 2021-05-07 Modified 2021-05-06 Official page ↗
Aliases
CVE-2020-8910
Ecosystem
npm
Packages
google-closure-library
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-20
Reviewed
2021-05-06

Affected packages

• npm google-closure-library: < 20200315.0.0 → fixed in 20200315.0.0

Description

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation -- update your library to version v20200315.

Related

Alias · CVE (1)

  • CVE-2020-8910 A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References