Lucene search

K
nvd[email protected]NVD:CVE-2022-37609
HistoryOct 11, 2022 - 7:15 p.m.

CVE-2022-37609

2022-10-1119:15:11
CWE-1321
web.nvd.nist.gov
2
vulnerability
js-beautify
options.js
name variable
prototype pollution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.3%

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js.

Affected configurations

Nvd
Node
js-beautify_projectjs-beautifyMatch1.13.7
VendorProductVersionCPE
js-beautify_projectjs-beautify1.13.7cpe:2.3:a:js-beautify_project:js-beautify:1.13.7:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.3%

Related for NVD:CVE-2022-37609