medialize

Products

ProductCVEsExploitedLatest
medialize/URI.js5–Apr 5, 2022
URI.js2–Mar 3, 2022

Exploited and recent CVEs

  • CVE-2022-1243 High 7.2 CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js 0.7%
  • CVE-2022-1233 Medium 6.5 URL Confusion When Scheme Not Supplied in medialize/uri.js 0.8%
  • CVE-2022-0868 High 8.0 Open Redirect in medialize/uri.js 0.7%
  • CVE-2022-24723 Medium 5.3 Improper Input Validation in URI.js 1.9%
  • CVE-2022-0613 Medium 5.3 Authorization Bypass Through User-Controlled Key in medialize/uri.js 1.5%
  • CVE-2021-3647 Medium 5.3 Open Redirect in medialize/URI.js 0.9%
  • CVE-2020-26291 Medium 6.5 Hostname spoofing in URI.js 1.7%