Lucene search
+L

6 matches found

OSV
OSV
•added 2022/05/24 10:01 p.m.•37 views

GHSA-P84X-5XX8-HFF9 bson-objectid contains Improper input validation

An issue was discovered in the BSON ObjectID aka bson-objectid package 1.3.0 for Node.js. ObjectID allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects bsontype==ObjectID in the user-input...

7.5CVSS7.2AI score0.01085EPSS
SaveExploits1References4
OSV
OSV
•added 2019/12/11 8:15 p.m.•19 views

CVE-2019-19729

An issue was discovered in the BSON ObjectID aka bson-objectid package 1.3.0 for Node.js. ObjectID allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects bsontype==ObjectID in the user-input...

7.5CVSS7.2AI score0.01085EPSS
SaveExploits1References2
NVD
NVD
•added 2019/12/11 8:15 p.m.•45 views

CVE-2019-19729

An issue was discovered in the BSON ObjectID aka bson-objectid package 1.3.0 for Node.js. ObjectID allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects bsontype==ObjectID in the user-input...

7.5CVSS7.6AI score0.01085EPSS
SaveExploits1References2
Mend
Mend
•added 2019/12/11 7:56 p.m.•6 views

CVE-2019-19729

An issue was discovered in the BSON ObjectID aka bson-objectid package 1.3.0 for Node.js. ObjectID allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects bsontype==ObjectID in the user-input...

8.7CVSS0.01085EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2019/12/11 12:00 a.m.•5 views

PT-2019-15930

Name of the Vulnerable Software and Affected Versions bson-objectid package version 1.3.0 Description An issue in the bson-objectid package allows an attacker to generate a malformed objectid by inserting an additional property to the user-input. This occurs because bson-objectid returns early if...

7.5CVSS0.01085EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/11 12:00 a.m.•2 views

CVE-2019-19729: Always-Incorrect Control Flow Implementation

An issue was discovered in the BSON ObjectID aka bson-objectid package 1.3.0 for Node.js. ObjectID allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects bsontype==ObjectID in the user-input...

7.5CVSS7.3AI score0.01085EPSS
SaveExploits1References2
Rows per page
Query Builder