Open Redirect in urijs

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-0868 · ADVISORY
• medialize/uri.js commit a8166fe · WEB
• medialize/URI.js release v1.19.10 · WEB
• medialize/uri.js · PACKAGE
• huntr.dev/bounties/5f4db013-64bd-4a6b-9dad-870c296b0b02 · WEB

uri.js のその他の脆弱性

• CVE-2022-1243中 6.1CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.
• CVE-2022-1233中 6.1URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.
• CVE-2022-24723中 5.3URI.js is a Javascript URL mutation library. Before version 1.19.9, whitespace characters are not removed from the beginning of the protocol…
• CVE-2022-0613中 6.5Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.
• CVE-2021-3647中 6.1URI.js is vulnerable to URL Redirection to Untrusted Site