CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2021-3647 – Open Redirect in medialize/URI.js
https://notcve.org/view.php?id=CVE-2021-3647
URI.js is vulnerable to URL Redirection to Untrusted Site URI.js es vulnerable a la redirección de URL a un sitio no confiable • https://github.com/medialize/URI.js/commit/ac43ca8f80c042f0256fb551ea5203863dec4481 https://huntr.dev/bounties/1625558772840-medialize/URI.js • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-27516 – nodejs-urijs: mishandling certain uses of backslash may lead to confidentiality compromise
https://notcve.org/view.php?id=CVE-2021-27516
URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. URI.js (también se conoce como urijs) versiones anteriores a 1.19.6, maneja inapropiadamente determinados usos de barra invertida como http:\/ e interpreta el URI como una ruta relativa A flaw was found in nodejs-urijs where URI.js (urijs) mishandles certain uses of the backslash such as http:\/ and interprets the URI as a relative path. The highest threat from this vulnerability is to confidentiality. • https://advisory.checkmarx.net/advisory/CX-2021-4305 https://github.com/medialize/URI.js/commit/a1ad8bcbc39a4d136d7e252e76e957f3ece70839 https://github.com/medialize/URI.js/releases/tag/v1.19.6 https://access.redhat.com/security/cve/CVE-2021-27516 https://bugzilla.redhat.com/show_bug.cgi?id=1934470 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-26291 – Hostname spoofing in URI.js
https://notcve.org/view.php?id=CVE-2020-26291
URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`\`) character followed by an at (`@`) character. If the hostname is used in security decisions, the decision may be incorrect. Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior. For example the URL `https://expected-example.com\@observed-example.com` will incorrectly return `observed-example.com` if using an affected version. • https://github.com/medialize/URI.js/commit/b02bf037c99ac9316b77ff8bfd840e90becf1155 https://github.com/medialize/URI.js/releases/tag/v1.19.4 https://github.com/medialize/URI.js/security/advisories/GHSA-3329-pjwv-fjpg https://www.npmjs.com/package/urijs https://access.redhat.com/security/cve/CVE-2020-26291 https://bugzilla.redhat.com/show_bug.cgi?id=1915257 • CWE-20: Improper Input Validation •