Approved changes feed: RSS · Atom

cpe:2.3:a:medialize:medialize/uri.js:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMedialize (964e03b3-ee67-50bf-92b9-f2849b490354)
ProductMedialize/Uri.Js (937c6e88-9ed8-51e6-8998-43a6235d24af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1243 vulnerable 2026-06-08 05:39:12.481143 CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js
HIGH (7.2)
CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.
Published: 2022-04-05T15:05:18.000Z
Updated: 2024-08-02T23:55:24.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1233 vulnerable 2026-06-08 05:39:12.466181 URL Confusion When Scheme Not Supplied in medialize/uri.js
MEDIUM (6.5)
URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.
Published: 2022-04-04T19:30:15.000Z
Updated: 2024-08-02T23:55:24.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0868 vulnerable 2026-06-08 05:39:11.385920 Open Redirect in medialize/uri.js
HIGH (8)
Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.
Published: 2022-03-06T15:20:09.000Z
Updated: 2024-08-02T23:40:04.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0613 vulnerable 2026-06-08 05:39:10.375701 Authorization Bypass Through User-Controlled Key in medialize/uri.js
MEDIUM (5.3)
Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.
Published: 2022-02-16T08:40:09.000Z
Updated: 2024-08-02T23:32:46.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3647 vulnerable 2026-06-08 05:33:53.281788 Open Redirect in medialize/URI.js
MEDIUM (5.3)
URI.js is vulnerable to URL Redirection to Untrusted Site
Published: 2021-07-16T10:11:17.000Z
Updated: 2024-08-03T17:01:08.296Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.