CVE-2021-364716.07.2021, 11:15URI.js is vulnerable to URL Redirection to Untrusted SiteOpen RedirectEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNIST6.1 MEDIUMNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N@huntrdevCNA5.3 MEDIUMNETWORKLOWNONECVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVEADP------Base ScoreCVSS 3.xEPSS ScorePercentile: 40%VendorProductVersionuri.js_projecturi.js𝑥< 1.19.7𝑥= Vulnerable software versionsUbuntu ReleasesUbuntu ProductCodenamenode-uri-jsnobleneeds-triagemanticignoredlunarignoredkineticignoredjammyneeds-triageimpishignoredhirsuteignoredgroovyignoredfocalneeds-triagebionicdnexenialignoredtrustydneKnown Exploits!https://huntr.dev/bounties/1625558772840-medialize/URI.jshttps://huntr.dev/bounties/1625558772840-medialize/URI.jsCommon Weakness EnumerationCWE-601 - URL Redirection to Untrusted Site ('Open Redirect')A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.Referenceshttps://github.com/medialize/URI.js/commit/ac43ca8f80c042f0256fb551ea5203863dec4481https://huntr.dev/bounties/1625558772840-medialize/URI.jshttps://github.com/medialize/URI.js/commit/ac43ca8f80c042f0256fb551ea5203863dec4481https://huntr.dev/bounties/1625558772840-medialize/URI.js
