CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2022/09/15 1:15 p.m.•22 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.8CVSS0.01094EPSS

Exploits0References3

ATTACKERKB•added 2022/09/15 1:15 p.m.•4 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.8CVSS7.3AI score0.01094EPSS

Exploits0References6

Cvelist•added 2022/09/15 12:30 p.m.•39 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.7AI score0.01094EPSS

Exploits0References3

OSV•added 2022/09/15 12:30 p.m.•14 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.8CVSS9.4AI score0.01094EPSS

Exploits0References5

CVE•added 2022/09/15 12:30 p.m.•70 views

CVE-2022-37257

CVE-2022-37257 affects stealjs Steal 2.2.4 (prototype pollution) in the convertLater function via the requestedVersion variable in npm-convert.js. Root cause: prototype contamination allowing injection into proto , constructor, and prototype chains. Impact per sources: high confidentiality, integ...

9.8CVSS9.4AI score0.01094EPSS

Exploits0References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by