Lucene search
China National Vulnerability DatabaseCNVD-2022-15520HistoryJan 13, 2022 - 12:00 a.m.
crosis information leakage vulnerability
2022-01-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.001 Low
EPSS
Percentile
27.2%
crosis is a JavaScript client that uses the Replit container protocol. crosis is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtain a token used to connect to Repl.
| CPE | Name | Operator | Version |
|---|---|---|---|
| crosis crosis | lt | 7.3.1 |
Related
cve
cve
CVE-2022-21671
2022-01-11 15:15:08
nvd
nvd
CVE-2022-21671
2022-01-11 15:15:08
veracode
veracode
Information Disclosure
2022-01-12 05:51:17
osv
osv
CVE-2022-21671
2022-01-11 15:15:08
Potential exposure of tokens to an Unauthorized Actor
2022-01-12 22:44:47
github
github
Potential exposure of tokens to an Unauthorized Actor
2022-01-12 22:44:47
prion
prion
Design/Logic Flaw
2022-01-11 15:15:00
cvelist
cvelist