Lucene search
+L

104 matches found

OSV
OSV
•added 2022/12/26 9:30 a.m.•84 views

GHSA-6XRF-Q977-5VGC json-pointer vulnerable to Prototype Pollution

A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be...

9.8CVSS6.2AI score0.01013EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/12/26 9:30 a.m.•70 views

json-pointer vulnerable to Prototype Pollution

A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be...

9.8CVSS9.5AI score0.01013EPSS
SaveExploits0References6Affected Software1
vulnersOsv
vulnersOsv
•added 2022/12/26 9:30 a.m.•5 views

@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +205 more potentially affected by CVE-2022-4742 via json-pointer (>=0.0.4, <=0.6.1)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =9.0.0, =2.0.0, =0.0.1, =0.1.0 and more Source cves: CVE-2022-4742 Source advisory: OSV:GHSA-6XRF-Q977-5VGC...

9.8CVSS6.7AI score0.01013EPSS
SaveExploits0
NVD
NVD
•added 2022/12/26 8:15 a.m.•57 views

CVE-2022-4742

A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be...

9.8CVSS0.01013EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/26 8:15 a.m.•45 views

Information disclosure

A vulnerability, which was classified as critical, has been found in json-pointer. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotel...

7.5CVSS9.4AI score0.01013EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2022/12/26 7:09 a.m.•143 views

CVE-2022-4742

CVE-2022-4742 affects json-pointer up to 0.6.1, specifically the index.js set function, enabling prototype pollution. The issue is exploitable remotely and is fixed by upgrading to 0.6.2 (patch 859c9984b6c407fc2d5a0a7e47c7274daa681941). Affected references consistently describe this as a critical...

9.8CVSS7.8AI score0.01013EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/12/26 7:09 a.m.•67 views

CVE-2022-4742 json-pointer index.js set prototype pollution

A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be...

6.5CVSS9.7AI score0.01013EPSS
SaveExploits0References4
OSV
OSV
•added 2022/12/26 7:09 a.m.•30 views

CVE-2022-4742 json-pointer index.js set prototype pollution

A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be...

6.3CVSS6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/12/26 12:00 a.m.•10 views

PT-2022-28063 · Unknown · Json-Pointer

Name of the Vulnerable Software and Affected Versions: json-pointer versions up to 0.6.1 Description: A critical issue has been found in the function set of the file index.js, leading to improperly controlled modification of object prototype attributes, also known as 'prototype pollution'. This...

9.8CVSS6.8AI score0.01013EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2022/12/26 12:00 a.m.•10 views

Json-Pointer 安全漏洞

Json-Pointer is an open source, Rfc 6901 described Json pointer some utility program by the individual developer Manuel Stofer in Switzerland. A security vulnerability exists in Json-Pointer. An attacker could exploit this vulnerability to cause prototype contamination...

9.8CVSS6.9AI score0.01013EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/26 12:00 a.m.•0 views

CVE-2022-4742: Improperly Controlled Modification of Object Prototype Attributes

A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be...

9.8CVSS5AI score0.01013EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/08 5:40 p.m.•25 views

GHSA-V5VG-G7RQ-363W Prototype Pollution in json-pointer

This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

5.6CVSS5.8AI score0.01873EPSS
SaveExploits1References6
vulnersOsv
vulnersOsv
•added 2021/11/08 5:40 p.m.•6 views

@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +205 more potentially affected by CVE-2021-23820 via json-pointer (>=0.0.4, <=0.6.1)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =9.0.0, =2.0.0, =0.0.1, =0.1.0 and more Source cves: CVE-2021-23820 Source advisory: OSV:GHSA-V5VG-G7RQ-363W...

9.8CVSS6.7AI score0.01873EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2021/11/08 5:40 p.m.•52 views

Prototype Pollution in json-pointer

This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

9.8CVSS4.8AI score0.01873EPSS
SaveExploits1References6Affected Software1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•109 views

json-pointer has an unspecified vulnerability

Json-Pointer is an open source, Rfc 6901 described by Manuel Stofer, a Swiss individual developer of some utilities for Json pointers. json-pointer has a security vulnerability that stems from improper design or implementation during the code development of a web-based system or product. No...

9.8CVSS3.8AI score0.01873EPSS
SaveExploits1References1
Veracode
Veracode
•added 2021/11/05 12:21 p.m.•27 views

Prototype Pollution

json-pointer is vulnerable to prototype pollution. The vulnerability exists in the 'set' function of 'index.js' as a bypass of a previous fix for a prototype pollution vulnerability. An attacker is able to inject arbitrary properties into existing construct prototypes and modification of attribut...

9.8CVSS3.5AI score0.01873EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2021/11/03 6:15 p.m.•101 views

CVE-2021-23820

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

9.8CVSS0.01873EPSS
SaveExploits1References3
OSV
OSV
•added 2021/11/03 6:15 p.m.•10 views

CVE-2021-23820

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

9.8CVSS6.8AI score0.01873EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/03 6:15 p.m.•35 views

Type confusion

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

7.5CVSS7.3AI score0.01873EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2021/11/03 5:20 p.m.•85 views

CVE-2021-23820 Prototype Pollution

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

5.6CVSS7.7AI score0.01873EPSS
SaveExploits1References3
Rows per page
Query Builder