logo

Database

Uncontrolled external site redirect In urijs

Description

Open Redirect in urijs urijs prior to version 1.19.10 is vulnerable to open redirect. This is the result of a bypass for the fix to CVE-2022-0613.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2022-08682. NVD-2022-08683. OSV-2022-08684. GCVE-2022-0868

References

1. https://github.com/medialize/uri.js/commit/a8166fe02f3af6dc1b2b888dcbb807155aad95092. https://github.com/medialize/URI.js/releases/tag/v1.19.103. https://huntr.dev/bounties/5f4db013-64bd-4a6b-9dad-870c296b0b02

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.