Lucene search

K
osvGoogleOSV:CVE-2021-23682
HistoryFeb 16, 2022 - 5:15 p.m.

CVE-2021-23682

2022-02-1617:15:10
Google
osv.dev
5
cve-2021-23682
prototype pollution
query string
vulnerability
key sanitization
software

AI Score

9.4

Confidence

High

EPSS

0.018

Percentile

88.5%

This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized leading to a Prototype Pollution vulnerability.

AI Score

9.4

Confidence

High

EPSS

0.018

Percentile

88.5%