Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or uriComposeQueryEx* function because the '&' character is mishandled in certain contexts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
uriparser 安全漏洞
Vulnerability Description
uriparser是一个基于RFC 3986标准的URI解析和处理库。 uriparser 0.9.0之前版本中的UriQuery.c文件存在安全漏洞,该漏洞源于程序没有正确的处理‘&’字符。攻击者可借助‘uriComposeQuery*’或‘uriComposeQueryEx*’函数利用该漏洞造成越界写入。
CVSS Information
N/A
Vulnerability Type
N/A