CVE-2022-31140

🗓️ 11 Jul 2022 19:55:09Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 113 Views

Valinor PHP library <= v0.11.0 allows unauthorized access to `Throwable#getMessage()

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2022-31140	12 Jul 202200:19	–	circl
CNNVD	Valinor 安全漏洞	11 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-31140 Valinor error messages leading to potential data exfiltration	11 Jul 202219:55	–	cvelist
EUVD	EUVD-2022-6251	3 Oct 202520:07	–	euvd
Github Security Blog	Valinor error messages leading to potential data exfiltration before v0.12.0	12 Jul 202222:15	–	github
Mend	CVE-2022-31140	11 Jul 202219:55	–	mend
NVD	CVE-2022-31140	11 Jul 202220:15	–	nvd
osv_ghsa	GHSA-5PGM-3J3G-2RC7 Valinor error messages leading to potential data exfiltration before v0.12.0	12 Jul 202222:15	–	osv_ghsa
Prion	Design/Logic Flaw	11 Jul 202220:15	–	prion
Positive Technologies	PT-2022-20559	11 Jul 202200:00	–	ptsecurity

NVD

Vulners

Node

cuyz valinorRange<0.12.0

[
  {
    "product": "Valinor",
    "vendor": "CuyZ",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.12.0"
      }
    ]
  }
]