Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/03 12:00 a.m.•7 views

CVE-2021-23820: Access of Resource Using Incompatible Type

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

9.8CVSS5.7AI score0.01873EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/31 12:00 a.m.•4 views

PT-2021-8000

Name of the Vulnerable Software and Affected Versions jsonpointer versions prior to 5.0.0 Description A type confusion issue in the jsonpointer package can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays. This can potentially allow a remote attacker t...

10CVSS0.02752EPSS
SaveExploits1References16
Rows per page
Query Builder