medialize medialize/uri.js

5 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-1243unspecified – < 1.19.11CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.jsHIGH 7.20.7 %
CVE-2022-1233unspecified – < 1.19.11URL Confusion When Scheme Not Supplied in medialize/uri.jsMEDIUM 6.50.8 %
CVE-2022-0868unspecified – < 1.19.10Open Redirect in medialize/uri.jsHIGH 8.00.7 %
CVE-2022-0613unspecified – < 1.19.8Authorization Bypass Through User-Controlled Key in medialize/uri.jsMEDIUM 6.51.5 %
CVE-2021-3647unspecified – 1.19.6Open Redirect in medialize/URI.jsMEDIUM 6.10.9 %