CVE-2022-1243

2022-04-0515:15:08

Google

osv.dev

0.001 Low

EPSS

Percentile

29.7%

JSON

CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.

CPENameOperatorVersion
uri.jseq1.8.1
uri.jseq1.18.12
uri.jseq1.18.7
uri.jseq1.19.10
uri.jseq1.18.2
uri.jseq1.4.3
uri.jseq.1.15.1
uri.jseq1.6.1
uri.jseq1.8.2
uri.jseq1.18.10

Name	Operator	Version
uri.js	eq	1.8.1
uri.js	eq	1.18.12
uri.js	eq	1.18.7
uri.js	eq	1.19.10
uri.js	eq	1.18.2
uri.js	eq	1.4.3
uri.js	eq	.1.15.1
uri.js	eq	1.6.1
uri.js	eq	1.8.2
uri.js	eq	1.18.10

Rows per page:

1-10 of 711

References

github.com/medialize/uri.js/commit/b0c9796aa1a95a85f40924fb18b1e5da3dc8ffae

huntr.dev/bounties/8c5afc47-1553-4eba-a98e-024e4cc3dfb7

0.001 Low

EPSS

Percentile

29.7%

JSON

Related for OSV:CVE-2022-1243