Lucene search
DIVDCVELIST:CVE-2022-2421HistoryOct 25, 2022 - 12:00 a.m.
CVE-2022-2421 Socket.io - Improper type validation in attachment parsing
2022-10-2500:00:00
CWE-89
DIVD
raw.githubusercontent.com
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
Related
veracode
veracode
Type Confusion
2022-11-01 05:10:53
cve
cve
CVE-2022-2421
2022-10-26 10:15:00
osv
osv
Insufficient validation when decoding a Socket.IO packet
2022-10-26 12:00:28
CVE-2022-2421
2022-10-26 10:15:16
github
github
Insufficient validation when decoding a Socket.IO packet
2022-10-26 12:00:28
prion
prion
Input validation
2022-10-26 10:15:00
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to arbitrary code execution due to CVE-2022-2421
2022-11-04 17:33:30