Lucene search
K

5 matches found

Circl
Circl
added 2022/11/13 5:39 a.m.7 views

CVE-2022-41879

creationtimestamp| type| source ---|---|--- 2022-11-13 05:39:28+00:00| seen| https://t.me/cibsecurity/52877...

9.8CVSS8.1AI score0.00809EPSS
Exploits0References1
NVD
NVD
added 2022/11/10 9:15 p.m.31 views

CVE-2022-41879

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 5.3.3 or 4.10.20, a compromised Parse Server Cloud Code Webhook target endpoint allows an attacker to use prototype pollution to bypass the Parse Server...

9.8CVSS0.00809EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/11/10 12:0 a.m.41 views

CVE-2022-41879 Parse Server subject to Prototype pollution via Cloud Code Webhooks

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 5.3.3 or 4.10.20, a compromised Parse Server Cloud Code Webhook target endpoint allows an attacker to use prototype pollution to bypass the Parse Server...

7.2CVSS9.7AI score0.00809EPSS
Exploits0References1
CVE
CVE
added 2022/11/10 12:0 a.m.69 views

CVE-2022-41879

Parse Server is affected by a prototype pollution vulnerability in Cloud Code Webhook targets. In versions prior to 5.3.3 and 4.10.20, an attacker can exploit a compromised Cloud Code Webhook endpoint to bypass the server’s requestKeywordDenylist, enabling prototype pollution with potentially hig...

9.8CVSS8.2AI score0.00809EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/10 12:0 a.m.6 views

CVE-2022-41879 Parse Server subject to Prototype pollution via Cloud Code Webhooks

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 5.3.3 or 4.10.20, a compromised Parse Server Cloud Code Webhook target endpoint allows an attacker to use prototype pollution to bypass the Parse Server...

7.2CVSS9.4AI score0.00809EPSS
Exploits0References1
Rows per page
Query Builder