Back to Database
Status published
Medium
CVE-2022-24723
Improper Input Validation in URI.js
Vulnerability Description
URI.js is a Javascript URL mutation library. Before version 1.19.9, whitespace characters are not removed from the beginning of the protocol, so URLs are not parsed properly. This issue has been patched in version 1.19.9. Removing leading whitespace from values before passing them to URI.parse can be used as a workaround.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-24723
Credits & Attribution
No credits recorded in the NVD database.
References
More from medialize
View All →CVE-2022-1243
CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js
High
7.2
CVE-2022-1233
URL Confusion When Scheme Not Supplied in medialize/uri.js
Medium
6.5
CVE-2022-0868
Open Redirect in medialize/uri.js
High
8
CVE-2022-0613
Authorization Bypass Through User-Controlled Key in medialize/uri.js
Medium
5.3
CVE-2021-3647
Open Redirect in medialize/URI.js
Medium
5.3
Affected Vendor
medialize
View all reports →Affected Software
URI.js
Vulnerable Versions:
< 1.19.9
Timeline
Official Publish:
March 3rd, 2022
Last Modified:
April 22nd, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N