CVE-2022-1233: Misinterpretation of Input

April 4, 2022 (updated November 29, 2022)

URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.

References

github.com/advisories/GHSA-g694-m8vq-gv9h
github.com/medialize/uri.js/commit/88805fd3da03bd7a5e60947adb49d182011f1277
huntr.dev/bounties/228d5548-1109-49f8-8aee-91038e88371c
nvd.nist.gov/vuln/detail/CVE-2022-1233

Code Behaviors & Features

Detect and mitigate CVE-2022-1233 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →