Vulnerabilities > CVE-2021-27516 - Unspecified vulnerability in Uri.Js Project Uri.Js

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
uri-js-project

Summary

URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

Vulnerable Configurations

Part Description Count
Application
Uri.Js_Project
69