CVE-2022-3095
Last modified
CVE-2022-3095 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '\' characters in URIs, which can lead to auth bypass in webapps interpreting URIs. EPSS estimates a 0.87% chance of exploitation in the next 30 days.
Description
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '\' characters in URIs, which can lead to auth bypass in webapps interpreting URIs. We recommend updating Dart or Flutter to mitigate the issue.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dart | Dart Software Development Kit | < 2.18.0 |
| Flutter | Flutter | < 3.3.3 |
References
- https://github.com/dart-lang/sdk/blob/master/CHANGELOG.md#2182---2022-09-28Release Notes, Third Party Advisory
- https://github.com/dart-lang/sdk/blob/master/CHANGELOG.md#2182---2022-09-28Release Notes, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-3095?
How severe is CVE-2022-3095?
How do I fix CVE-2022-3095?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-30944Insufficiently protected credentials for Intel(R) AMT and In…5.5
- CVE-2022-30945Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and ear…8.5
- CVE-2022-30946A cross-site request forgery (CSRF) vulnerability in Jenkins…4.3
- CVE-2022-30947Jenkins Git Plugin 4.11.1 and earlier allows attackers able …7.5
- CVE-2022-30948Jenkins Mercurial Plugin 2.16 and earlier allows attackers a…7.5
- CVE-2022-30949Jenkins REPO Plugin 1.14.0 and earlier allows attackers able…5.3
- CVE-2022-30950Jenkins WMI Windows Agents Plugin 1.8 and earlier includes t…8.8
- CVE-2022-30951Jenkins WMI Windows Agents Plugin 1.8 and earlier includes t…8.8
- CVE-2022-30952Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and ea…6.5
- CVE-2022-30953A cross-site request forgery (CSRF) vulnerability in Jenkins…6.5
- CVE-2022-30954Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perfor…6.5
- CVE-2022-30955Jenkins GitLab Plugin 1.5.31 and earlier does not perform a …6.5
Are you affected by CVE-2022-3095?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST