CVE:CVE-2022-0613
CNNVD:CNNVD-202202-1320
urijs是一个Javascript URL 变异库。
urijs 1.19.8之前存在安全漏洞，该漏洞源于用户控制密钥绕过授权。
solution:Upgrade uri.js_project uri.js to a higher version than 1.19.8,and avoid the version (,1.19.8); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35