CVE-2022-41714

2022-11-0300:00:00

Fluid Attacks

www.cve.org

fastest-json-copy vulnerability

json keys validation

editing properties

cve-2022-41714

security issue

0.001 Low

EPSS

Percentile

37.0%

JSON

fastest-json-copy version 1.0.1 allows an external attacker to edit or add new properties to an object. This is possible because the application does not correctly validate the incoming JSON keys, thus allowing the ‘proto’ property to be edited.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "fastest-json-copy",
    "versions": [
      {
        "version": "1.0.1",
        "status": "affected"
      }
    ]
  }
]

References

fluidattacks.com/advisories/guetta/

github.com/streamich/fastest-json-copy

0.001 Low

EPSS

Percentile

37.0%

JSON

Related for CVELIST:CVE-2022-41714