Lucene search
GitHub Advisory DatabaseGHSA-3HVJ-2783-34X2HistoryMay 16, 2024 - 6:30 p.m.
njwt Prototype Pollution vulnerability
2024-05-1618:30:31
CWE-1321
GitHub Advisory Database
github.com
1
njwt v0.4.0
prototype pollution
parser.prototype.parse
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
High
njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.
Affected configurations
Node
njwtRange<2.0.1
Related
nvd
nvd
CVE-2024-34273
2024-05-16 16:15:08
osv
osv
njwt Prototype Pollution vulnerability
2024-05-16 18:30:31
cvelist
cvelist
CVE-2024-34273
1976-01-01 00:00:00
cve
cve
CVE-2024-34273
2024-05-16 16:15:08
vulnrichment
vulnrichment
CVE-2024-34273
1976-01-01 00:00:00
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
High
Related for GHSA-3HVJ-2783-34X2