Lucene search
+L

1 matches found

OSV
OSV
added 2022/11/26 10:15 p.m.6 views

AZL-45051 CVE-2022-24999 affecting package js-jquery 3.5.0-4

qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an proto key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string ...

7.5CVSS7.2AI score0.14663EPSS
SaveExploits2References1
Rows per page
Query Builder