CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

attackerkb•added 2022/09/15 1:15 p.m.•11 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.8CVSS7.3AI score0.01373EPSS

SaveExploits0References6

NVD•added 2022/09/15 1:15 p.m.•29 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.8CVSS0.01373EPSS

SaveExploits0References3

Cvelist•added 2022/09/15 12:30 p.m.•53 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.7AI score0.01373EPSS

SaveExploits0References3

CVE•added 2022/09/15 12:30 p.m.•91 views

CVE-2022-37257

CVE-2022-37257 affects stealjs Steal 2.2.4 (prototype pollution) in the convertLater function via the requestedVersion variable in npm-convert.js. Root cause: prototype contamination allowing injection into proto , constructor, and prototype chains. Impact per sources: high confidentiality, integ...

9.8CVSS9.4AI score0.01373EPSS

SaveExploits0References3Affected Software1

OSV•added 2022/09/15 12:30 p.m.•19 views

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

9.4AI score

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by