TI-2022-08538 CVE-2022-24723 · GHSA-gmv4-r438-p67f
Improper Input Validation in URI.js
Priority MEDIUM 63
URI.js is a Javascript URL mutation library.
medialize
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
medialize records in CISA KEVNo medialize vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2021-08996 CVE-2021-27516 · GHSA-p6j9-7xhc-rhwp
URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and…
Priority LOW 38
URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
TI-2022-00530 CVE-2022-0613 · GHSA-gcv8-gh4r-25x6
Authorization Bypass Through User-Controlled Key in medialize/uri.js
Priority LOW 32
Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.
TI-2020-16112 CVE-2020-26291 · GHSA-3329-pjwv-fjpg
Hostname spoofing in URI.js
Priority LOW 32
URI.js is a javascript URL mutation library (npm package urijs).
TI-2022-01120 CVE-2022-1233 · GHSA-g694-m8vq-gv9h
URL Confusion When Scheme Not Supplied in medialize/uri.js
Priority LOW 29
URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.
TI-2021-02592 CVE-2021-3647 · GHSA-89gv-h8wf-cg8r
Open Redirect in medialize/URI.js
Priority LOW 29
URI.js is vulnerable to URL Redirection to Untrusted Site
TI-2022-01130 CVE-2022-1243 · GHSA-3vjf-82ff-p4r3
CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js
Priority LOW 28
CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.
TI-2022-00774 CVE-2022-0868 · GHSA-8h2f-7jc4-7m3m
Open Redirect in medialize/uri.js
Priority LOW 28
Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.