Lucene search
HistoryAug 04, 2022 - 8:15 p.m.
CVE-2022-35142
renato v0.17.0
denial of service
search parameter
crafted payload
cve-2022-35142
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
56.3%
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.
Affected configurations
Node
raneto_projectranetoRange<0.17.1node.js
| Vendor | Product | Version | CPE |
|---|---|---|---|
| raneto_project | raneto | * | cpe:2.3:a:raneto_project:raneto:*:*:*:*:*:node.js:*:* |
Related
cvelist
cvelist
CVE-2022-35142
2022-08-04 19:37:12
prion
prion
Design/Logic Flaw
2022-08-04 20:15:00
veracode
veracode
Denial Of Service (DOS)
2022-08-05 16:25:55
github
github
cve
cve
CVE-2022-35142
2022-08-04 20:15:19
osv
osv
CVE-2022-35144
2022-08-04 20:15:19
CVE-2022-35142
2022-08-04 20:15:19
Raneto v0.17.0 employs weak password complexity requirements
2022-08-05 00:00:23
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
56.3%
Related for NVD:CVE-2022-35142