medium5.3
CVE-2022-32265
qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.
Impact
qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qdecoder Project | Qdecoder | before 12.1.0 |
References
- NVD record
- CVE.org record
- https://github.com/wolkykim/qdecoder/pull/29
- https://github.com/wolkykim/qdecoder/pull/29/commits/ce7c8a7ac450a823a11b06508ef1eb7441241f81#diff-1c4e2f5adfa1ad30618e78ff459b2c0758ecf34278459ad0a8d58db4fec622ea
- https://github.com/wolkykim/qdecoder/releases/tag/v12.1.0
- https://github.com/wolkykim/qdecoder/pull/29
- https://github.com/wolkykim/qdecoder/pull/29/commits/ce7c8a7ac450a823a11b06508ef1eb7441241f81#diff-1c4e2f5adfa1ad30618e78ff459b2c0758ecf34278459ad0a8d58db4fec622ea
- https://github.com/wolkykim/qdecoder/releases/tag/v12.1.0