Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2022/12/31 9:30 p.m.32 views

express-param vulnerable to Improper Handling of Extra Parameters

A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...

9.8CVSS9.1AI score0.00807EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2022/12/31 8:15 p.m.25 views

CVE-2017-20160

A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...

9.8CVSS0.00807EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/12/31 7:15 p.m.30 views

CVE-2017-20160 flitto express-param fetchParams.js parameter pollution

A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...

6.5CVSS9.7AI score0.00807EPSS
SaveExploits0References5
Rows per page
Query Builder