Lucene search

CVE-2022-2421 Socket.io - Improper type validation in attachment parsing

🗓️ 25 Oct 2022 00:00:00Reported by DIVDType

Improper type validation in Socket.io attachment parsing CVE-2022-242

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 12
NVD	CVE-2022-2421	26 Oct 202210:15	–	nvd
Github Security Blog	Insufficient validation when decoding a Socket.IO packet	26 Oct 202212:00	–	github
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to arbitrary code execution due to CVE-2022-2421	4 Nov 202217:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.9 and earlier	9 Jan 202318:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	28 Mar 202415:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
Vulnrichment	CVE-2022-2421 Socket.io - Improper type validation in attachment parsing	25 Oct 202200:00	–	vulnrichment
OSV	CVE-2022-2421	26 Oct 202210:15	–	osv
OSV	Insufficient validation when decoding a Socket.IO packet	26 Oct 202212:00	–	osv
Prion	Input validation	26 Oct 202210:15	–	prion

[
  {
    "vendor": "Socket.io",
    "product": "Socket.io-Parser",
    "versions": [
      {
        "status": "affected",
        "version": "4.x",
        "lessThan": "4.2.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
csirt	www.csirt.divd.nl/DIVD-2022-00045
csirt	www.csirt.divd.nl/CVE-2022-2421

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Oct 2022 00:00Current

9.6High risk

Vulners AI Score9.6

CVSS310

EPSS0.01191

CWE-89