CVE-2022-25871

🗓️ 17 Jun 2022 20:05:34Reported by snykType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 64 Views

All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-25871	17 Jun 202220:00	–	attackerkb
Circl	CVE-2022-25871	18 Jun 202200:23	–	circl
CNNVD	querymen 安全漏洞	17 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-25871 Prototype Pollution	17 Jun 202220:05	–	cvelist
EUVD	EUVD-2022-6101	3 Oct 202520:07	–	euvd
Github Security Blog	Prototype Pollution in querymen	18 Jun 202200:00	–	github
NVD	CVE-2022-25871	17 Jun 202220:15	–	nvd
OSV	GHSA-P23C-P8W2-WW5V Prototype Pollution in querymen	18 Jun 202200:00	–	osv
Prion	Design/Logic Flaw	17 Jun 202220:15	–	prion
Snyk	Prototype Pollution	2 Feb 202213:19	–	snyk

NVD

Node

querymen_project querymen

[
  {
    "product": "querymen",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]