Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-3193

Malicious code in bioql PyPI...

4.3CVSS4.8AI score0.00362EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 4:35 a.m.5 views

CVE-2023-50710

Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources...

4.3CVSS6.7AI score0.00362EPSS
Exploits1References1
OSV
OSV
added 2023/12/15 2:45 a.m.28 views

GHSA-F6GV-HH8J-Q8VQ Named path parameters can be overridden in TrieRouter

Impact The clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources. TrieRouter is used either explicitly or when the application matche...

4.2CVSS4.5AI score0.00362EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2023/12/15 2:45 a.m.29 views

Named path parameters can be overridden in TrieRouter

Impact The clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources. TrieRouter is used either explicitly or when the application matche...

4.3CVSS7AI score0.00362EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2023/12/14 6:15 p.m.11 views

CVE-2023-50710

Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources...

4.3CVSS0.00362EPSS
Exploits1References3
Prion
Prion
added 2023/12/14 6:15 p.m.10 views

Design/Logic Flaw

Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources...

4.3CVSS6.9AI score0.00362EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/12/14 5:22 p.m.112 views

CVE-2023-50710

Summary: CVE-2023-50710 affects the Hono web framework (TypeScript). Before v3.11.7, when using TrieRouter, a client could override named path parameters from a previous request, potentially causing a privileged user to use unintended parameters when deleting REST API resources. The issue is miti...

4.3CVSS4.3AI score0.00362EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/14 5:22 p.m.19 views

CVE-2023-50710 Hono's named path parameters can be overridden in TrieRouter

Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources...

4.2CVSS4.8AI score0.00362EPSS
Exploits1References3
OSV
OSV
added 2023/12/14 5:22 p.m.17 views

CVE-2023-50710 Hono's named path parameters can be overridden in TrieRouter

Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requests if the application is using TrieRouter. So, there is a risk that a privileged user may use unintended parameters when deleting REST API resources...

4.2CVSS4.7AI score0.00362EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2023/12/14 12:0 a.m.2 views

PT-2023-31617 · Hono · Hono

Name of the Vulnerable Software and Affected Versions: Hono versions prior to 3.11.7 Description: The issue allows clients to override named path parameter values from previous requests when the application is using TrieRouter. This poses a risk that a privileged user may use unintended parameter...

4.3CVSS4.4AI score0.00362EPSS
Exploits1References10
CNNVD
CNNVD
added 2023/12/14 12:0 a.m.2 views

Hono Code Injection Vulnerability

Hono is a web framework written in TypeScript from the Hono community. A code injection vulnerability exists in versions prior to Hono 3.11.7 that stems from the risk that if an application uses TrieRouter, a client may overwrite the value of the named path parameter in a previous request, leadin...

4.3CVSS7.3AI score0.00362EPSS
Exploits1References4
Rows per page
Query Builder