Lucene search
+L

6003 matches found

ATTACKERKB
ATTACKERKB
added 2022/10/12 8:15 p.m.5 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS6.7AI score0.02813EPSS
SaveExploits1References10
OSV
OSV
added 2022/10/12 12:0 p.m.34 views

GHSA-HHQ3-FF78-JV3G loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or ta...

7.5CVSS6.6AI score0.02217EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2022/10/12 12:0 p.m.54 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or ta...

7.5CVSS7.2AI score0.02217EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
added 2022/10/12 2:12 a.m.100 views

Regular Expression Denial Of Service (ReDoS)

loader-utils is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the resourcePath variable in interpolateName.js, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.3AI score0.02217EPSS
SaveExploits0References6Affected Software6
CVE
CVE
added 2022/10/12 12:0 a.m.399 views

CVE-2022-37601

Prototype pollution in webpack loader-utils: parseQuery.js via the name variable affects all versions prior to 1.4.1 and 2.0.3. CVSS v3.1 base score 9.8 (CRITICAL) with high impact on confidentiality, integrity, and availability. Remediation: upgrade loader-utils to 1.4.1+ or 2.0.3+ (patched vers...

9.8CVSS9.1AI score0.02813EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
added 2022/10/12 12:0 a.m.40 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.5AI score0.02813EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2022/10/12 12:0 a.m.4 views

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in webpack loader-utils version 2.0.0, which stems from the discovery of a prototype contamination vulnerability contained in the parseQuerys function of parseQuery.js...

9.8CVSS7.2AI score0.02813EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2022/10/12 12:0 a.m.8 views

PT-2022-24022

Name of the Vulnerable Software and Affected Versions loader-utils versions prior to 1.4.1 loader-utils versions prior to 2.0.3 Description The issue is related to a prototype pollution vulnerability in the parseQuery function within parseQuery.js in webpack loader-utils. This vulnerability is...

9.8CVSS7.9AI score0.02813EPSS
SaveExploits1References32
OSV
OSV
added 2022/10/12 12:0 a.m.38 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.2AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2022/10/12 12:0 a.m.25 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

6.6AI score0.02813EPSS
SaveExploits1References9
Debian CVE
Debian CVE
added 2022/10/12 12:0 a.m.47 views

CVE-2022-37601

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

9.8CVSS8.5AI score0.02813EPSS
SaveExploits1
NVD
NVD
added 2022/10/11 7:15 p.m.26 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS0.02217EPSS
SaveExploits0References7
OSV
OSV
added 2022/10/11 7:15 p.m.6 views

DEBIAN-CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS7.4AI score0.02217EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/11 7:15 p.m.8 views

UBUNTU-CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS6.7AI score0.02217EPSS
SaveExploits0References5
Prion
Prion
added 2022/10/11 7:15 p.m.31 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

5CVSS7.8AI score0.02217EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2022/10/11 7:15 p.m.51 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS6.8AI score0.02217EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.46 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.6AI score0.02217EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.4 views

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in webpack loader-utils version 2.0.0, which stems from the discovery of a regular expression denial of service ReDoS vulnerability contained in the interpolateName function of interpolateName...

7.5CVSS6.9AI score0.02217EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.6 views

PT-2022-24021

Name of the Vulnerable Software and Affected Versions webpack loader-utils version 2.0.0 Description A Regular expression denial of service ReDoS flaw was found in the interpolateName function in interpolateName.js via the resourcePath variable. This issue could be exploited by sending crafted...

7.5CVSS7.2AI score0.02217EPSS
SaveExploits0References32
CVE
CVE
added 2022/10/11 12:0 a.m.238 views

CVE-2022-37599

CVE-2022-37599: A ReDoS in Function interpolateName (interpolateName.js) in webpack loader-utils 2.0.0 is triggered via the resourcePath variable in interpolateName.js. The Nessus/Confluence entry explicitly ties this CVE to affected Confluence deployments using webpack loader-utils, describing a...

7.5CVSS7.2AI score0.02217EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder