CVE-2022-24723

2022-03-0300:00:00

ubuntu.com

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

39.7%

JSON

URI.js is a Javascript URL mutation library. Before version 1.19.9,
whitespace characters are not removed from the beginning of the protocol,
so URLs are not parsed properly. This issue has been patched in version
1.19.9. Removing leading whitespace from values before passing them to
URI.parse can be used as a workaround.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchnode-uri-js< anyUNKNOWN
ubuntu22.04noarchnode-uri-js< anyUNKNOWN
ubuntu23.10noarchnode-uri-js< anyUNKNOWN
ubuntu24.04noarchnode-uri-js< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	node-uri-js	< any	UNKNOWN
ubuntu	22.04	noarch	node-uri-js	< any	UNKNOWN
ubuntu	23.10	noarch	node-uri-js	< any	UNKNOWN
ubuntu	24.04	noarch	node-uri-js	< any	UNKNOWN