GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12.1M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2025-58362: Fixed Url Scheme Offset Path Confusioncve-2025-58362-fixed-url-scheme-offset-path-confusion

Extracting paths from URLs using fixed character offsets based on assumptions about scheme lengths can lead to interpretation conflicts and path confusion. Malformed URIs might cause the extractor to yield an incorrect path, potentially bypassing upstream proxy path-based ACLs. Use a dynamically calculated offset based on a protocol separator (e.g., `url.ind

TSCVE-2025-58362GHSA-9PXF-XMCQ-9PQRCWE-436
by Provallyupdated 2026-06-12Apache-2.0
3.5K0 direct3.5K via packs
73
All matching rules loaded.