GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
6.6M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2025-58362: Fixed Url Scheme Offset Path Confusioncve-2025-58362-fixed-url-scheme-offset-path-confusion

Extracting paths from URLs using fixed character offsets based on assumptions about scheme lengths can lead to interpretation conflicts and path confusion. Malformed URIs might cause the extractor to yield an incorrect path, potentially bypassing upstream proxy path-based ACLs. Use a dynamically calculated offset based on a protocol separator (e.g., `url.ind

TSCVE-2025-58362GHSA-9PXF-XMCQ-9PQRCWE-436
by Provallyupdated 2026-06-12Apache-2.0
2.4K0 direct2.4K via packs
73
All matching rules loaded.