Lucene search
PRIOn knowledge basePRION:CVE-2022-2421HistoryOct 26, 2022 - 10:15 a.m.
Input validation
2022-10-2610:15:00
PRIOn knowledge base
www.prio-n.com
3
type validation
socket.io
attachment parsing
attacker
query object
nvd
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
| CPE | Name | Operator | Version |
|---|---|---|---|
| socket.io-parser | ge | 4.1.0 | |
| socket.io-parser | lt | 4.2.1 | |
| socket.io-parser | lt | 4.0.5 |
Related
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to arbitrary code execution due to CVE-2022-2421
2022-11-04 17:33:30
osv
osv
CVE-2022-2421
2022-10-26 10:15:16
Insufficient validation when decoding a Socket.IO packet
2022-10-26 12:00:28
cve
cve
CVE-2022-2421
2022-10-26 10:15:16
veracode
veracode
Type Confusion
2022-11-01 05:10:53
cvelist
cvelist
CVE-2022-2421 Socket.io - Improper type validation in attachment parsing
2022-10-25 00:00:00
nvd
nvd
CVE-2022-2421
2022-10-26 10:15:16
github
github
Insufficient validation when decoding a Socket.IO packet
2022-10-26 12:00:28