CVE-2022-0122

ADVISORY - github

Summary

parseUrl functionality in node-forge mishandles certain uses of backslash such as https:/\/\/\ and interprets the URI as a relative path.

EPSS Score⁠: 0.00076 (0.338)

ADVISORY - nist

URL Redirection to Untrusted Site ('Open Redirect')

ADVISORY - github

URL Redirection to Untrusted Site ('Open Redirect')

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

URL Redirection to Untrusted Site ('Open Redirect')

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.