Lucene search
Veracode Vulnerability DatabaseVERACODE:34985HistoryApr 06, 2022 - 7:39 a.m.
Cross-site Scripting (XSS)
2022-04-0607:39:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
29.7%
uri.js is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of \r (CR), \n, (LF) \t (TAB) of the URI allowing an attacker to inject maliciously crafted script into the system.
Related
osv
osv
CVE-2022-1243
2022-04-05 15:15:08
Incorrect protocol extraction via \r, \n and \t characters
2022-04-06 00:01:31
github
github
Incorrect protocol extraction via \r, \n and \t characters
2022-04-06 00:01:31
huntr
huntr
CRHTLF can lead to invalid protocol extraction potentially leading to XSS
2022-03-18 08:49:02
prion
prion
Cross site scripting
2022-04-05 15:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-1243
2022-04-05 15:15:08
cve
cve
CVE-2022-1243
2022-04-05 15:15:08
