PT-2022-12976 · Unknown · Node-Forge

Published 2022-01-06 · Updated 2022-01-21 · CVE-2022-0122

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions forge versions prior to 1.0.0

Description The issue concerns a URL redirection vulnerability to untrusted sites. The parseUrl functionality in node-forge mishandles certain uses of backslash, such as https:///, and interprets the URI as a relative path. This could lead to undesired behavior due to improper parsing of certain inputs by the regex used for the forge.util.parseUrl API.

Recommendations For versions prior to 1.0.0, ensure code does not directly or indirectly call forge.util.parseUrl with untrusted input. Consider updating to version 1.0.0 or later, where forge.util.parseUrl and other related URL APIs were removed in favor of the more modern WHATWG URL Standard API.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-0122

GHSA-8FR3-HFG3-GPGP

GHSA-GF8Q-JRPM-JVXQ

Affected Products

Node-Forge

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0122.json · Exploit
• 🔥 https://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4ae · Exploit
• https://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0122 · Security Note
• https://osv.dev/vulnerability/GHSA-gf8q-jrpm-jvxq · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8fr3-hfg3-gpgp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0122 · Vendor Advisory
• https://github.com/digitalbazaar/forge · Note
• https://github.com/digitalbazaar/forge/security/advisories/GHSA-gf8q-jrpm-jvxq · Note
• https://t.me/cibsecurity/35022 · Telegram Post
• https://t.me/cvenotify/25012 · Telegram Post