Skip to content
OpenAdvisories
High · 7.2 CVE-2022-1243 EUVD-2022-1612GHSA-3vjf-82ff-p4r3

CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js

Published Apr 5, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: medialize Product: medialize/URI.js Package: urijs Ecosystem: npm

Description

CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.

Affected products

VendorProductAffectedFixed
medialize medialize/uri.js unspecified – < 1.19.11 1.19.11

Affected packages

EcosystemPackageAffectedFixedRecord
npm urijs < 1.19.11 1.19.11 GHSA-3vjf-82ff-p4r3

References