Description (CNA)
In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| browser-use / browser-use | affected 0 before 0.1.45 |
CWE
CWE-647
References
- https://github.com/browser-use/browser-use/security/advisories/GHSA-x39x-9qw5-ghrf
- https://github.com/browser-use/browser-use/releases/tag/0.1.45
- https://github.com/browser-use/browser-use/pull/1561
ADP enrichment
No English description supplied.
No references supplied.