Medialize
7 CVEs across 2 Medialize products. Browse Medialize vulnerabilities, severities, and proof-of-concept exploits.
Medialize products with known CVEs
Medialize CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-1243 | Medium | 6.1 | 2022-04-05 | CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11. |
CVE-2022-1233 | Medium | 6.1 | 2022-04-04 | URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11. |
CVE-2022-0868 | Medium | 6.1 | 2022-03-06 | Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10. |
CVE-2022-24723 | Medium | 5.3 | 2022-03-03 | URI.js is a Javascript URL mutation library. Before version 1.19.9, whitespace characters are not removed from the beginning of the protocol, so URLs are not p… |
CVE-2022-0613 | Medium | 6.5 | 2022-02-16 | Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8. |
CVE-2021-3647 | Medium | 6.1 | 2021-07-16 | URI.js is vulnerable to URL Redirection to Untrusted Site |
CVE-2020-26291 | Medium | 6.5 | 2020-12-31 | URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`\`) charac… |