CVE-2022-1365

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +2812 more potentially affected by CVE-2022-1365 via cross-fetch (>=3.0.0, <=3.1.4)

cross-fetch NPM version =3.0.0, =1.0.0, =0.0.1, =0.0.1, =0.1.0, =1.0.22, =0.0.1, =0.4.22, =0.5.3, =5.0.0, =1.0.0, =1.0.0, =1.0.62 and more Source cves: CVE-2022-1365 Source advisory: MEND:CVE-2022-1365...

8base-cli (>=0.0.80, <=0.1.3-rc9), 8base-cli-continued (>=1.0.0-beta.1, <=1.0.0-beta.4) +1580 more potentially affected by CVE-2022-1365 via cross-fetch (>=0.0.8, <=2.2.5)

cross-fetch NPM version =0.0.8, =0.0.80, =1.0.0-beta.1, =0.5.2, =1.5.0, =0.9.0, =0.0.1, =0.1.0, =1.16.0, =0.0.1, =1.1.4, =1.1.0, =1.1.1 - @adobe/aio-lib-analytics 2.0.0 and more Source cves: CVE-2022-1365 Source advisory: MEND:CVE-2022-1365...

CVE-2022-1365

CVE-2022-1365 affects the GitHub JavaScript library cross-fetch in the lquixada/cross-fetch repo, prior to version 3.1.5. The issue is a Cookie header flaw that could allow a remote authenticated attacker to obtain private information. Impact is exposure of sensitive data; no exploit details or v...