Prototype Pollution

🗓️ 12 Jan 2022 18:05:26Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 28 Views

nodejs vulnerability prototype pollution console.table() functio

Reporter	Title	Published	Views	Family All 404
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Verify Governance in response to a security vulnerability (CVE-2022-21824)	6 Oct 202218:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of NodeJS, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple security vulnerabilities.	5 Sep 202311:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to string injection vulnerability due to Node.js (CVE-2021-44532, CVE-2021-44532 )	9 May 202223:23	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple CVEs in Node.js	8 Apr 202214:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Node.js, and Data Tables from Spry Media may affect IBM Spectrum Protect Plus	31 Jan 202218:22	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Watson AIOps Infrastructure Automation	21 Oct 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Node.js (CVE-2021-44532, CVE-2021-44533, CVE-2022-21824)	22 Apr 202220:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	15 Jul 202516:38	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises (CVE-2021-4104, CVE-2021-29469, CVE-2021-44531, CVE-2021-44531, CVE-2022-21824, CVE-2021-29899, CVE-2021-27290 )	17 Mar 202215:37	–	ibm

Vulners

Node

nodejs nodejsMatch14.18.0-r0os

AND

nodejs nodejsMatch16.13.1-r1os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.16.1-r2os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.6-r1os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.16.0-r1os

AND

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch14.17.2-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch12.17.0-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch16.13.0-r0os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.13.1-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs-current nodejs-currentMatch13.12.0-r1os

AND

nodejs-current nodejs-currentMatch15.14.0-r0os

AND

nodejs-current nodejs-currentMatch14.2.0-r0os

AND

nodejs-current nodejs-currentMatch16.4.2-r0os

AND

nodejs-current nodejs-currentMatch15.12.0-r0os

AND

nodejs-current nodejs-currentMatch16.3.0-r0os

AND

nodejs-current nodejs-currentMatch16.6.1-r0os

AND

nodejs-current nodejs-currentMatch16.8.0-r0os

AND

nodejs-current nodejs-currentMatch17.2.0-r0os

AND

nodejs-current nodejs-currentMatch15.13.0-r0os

AND

nodejs-current nodejs-currentMatch13.11.0-r0os

AND

nodejs-current nodejs-currentMatch16.2.0-r0os

AND

nodejs-current nodejs-currentMatch16.0.0-r0os

AND

nodejs-current nodejs-currentMatch16.10.0-r0os

AND

nodejs-current nodejs-currentMatch17.3.0-r0os

AND

nodejs-current nodejs-currentMatch14.3.0-r0os

AND

nodejs-current nodejs-currentMatch13.12.0-r0os

AND

nodejs-current nodejs-currentMatch13.13.0-r0os

AND

nodejs-current nodejs-currentMatch16.11.1-r1os

AND

nodejs-current nodejs-currentMatch14.0.0-r0os

AND

nodejs-current nodejs-currentMatch16.9.1-r0os

AND

nodejs-current nodejs-currentMatch16.1.0-r0os

AND

nodejs-current nodejs-currentMatch14.1.0-r0os

AND

nodejs-current nodejs-currentMatch15.11.0-r0os

AND

nodejs-current nodejs-currentMatch17.0.1-r0os

AND

nodejs-current nodejs-currentMatch16.6.2-r0os

AND

nodejs-current nodejs-currentMatch13.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.5.0-r0os

AND

nodejs-current nodejs-currentMatch16.7.0-r0os

AND

nodejs-current nodejs-currentMatch16.4.0-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs-current nodejs-currentMatch17.0.1-r0os

AND

nodejs-current nodejs-currentMatch17.2.0-r0os

AND

nodejs-current nodejs-currentMatch17.1.0-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs nodejsMatch12.17.0-r0os

AND

nodejs nodejsMatch12.22.5-r0os

AND

nodejs nodejsMatch12.22.6-r0os

AND

nodejs nodejsMatch12.22.2-r0os

AND

nodejs nodejsMatch12.22.4-r0os

AND

nodejs nodejsMatch12.16.3-r0os

AND

nodejs nodejsMatch12.22.1-r0os

AND

nodejs nodejsMatch12.21.0-r0os

AND

alpinelinux alpine_linuxMatch3.12

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch14.18.1-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

alpinelinux alpine_linuxMatch3.14

nodejs nodejsMatch14.18.1-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.16.1-r1os

AND

nodejs nodejsMatch14.16.0-r0os

AND

alpinelinux alpine_linuxMatch3.13

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

openjdk11 openjdk11Match11.0.7_p10-r1os

AND

openjdk11 openjdk11Match11.0.10_p9-r0os

AND

openjdk11 openjdk11Match11.0.6_p10-r0os

AND

openjdk11 openjdk11Match11.0.14_p9-r0os

AND

openjdk11 openjdk11Match11.0.10_p9-r1os

AND

openjdk11 openjdk11Match11.0.11_p9-r0os

AND

openjdk11 openjdk11Match11.0.12_p7-r0os

AND

openjdk11 openjdk11Match11.0.13_p8-r0os

AND

openjdk11 openjdk11Match11.0.6_p10-r1os

AND

alpinelinux alpine_linuxMatchedge

openjdk11 openjdk11Match11.0.14_p9-r0os

AND

openjdk11 openjdk11Match11.0.13_p8-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch11

nodejs nodejsMatch10.24.0~dfsg-1~deb10u1debian

AND

nodejs nodejsMatch10.21.0~dfsg-1~deb10u1debian

AND

debian debian_linuxMatch10

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.20.0_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.15.4_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.16.0_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.18.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.5_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.19.1_2.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.22.5_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.18.2_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.16.1_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.21.0_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.10.0_3.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.22.2_1.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.10.0_4.el7

rh-nodejs12-nodejs rh-nodejs12-nodejsMatch12.14.1_1.el7

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/10/msg00006.html
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
debian	www.debian.org/security/2022/dsa-5170
hackerone	www.hackerone.com/reports/1431042
nodejs	www.nodejs.org/en/blog/vulnerability/jan-2022-security-releases/
security	www.security.netapp.com/advisory/ntap-20220325-0007/
security	www.security.netapp.com/advisory/ntap-20220729-0004/
oracle	www.oracle.com/security-alerts/cpuapr2022.html

20 Jul 2023 02:40Current

8.1High risk

Vulners AI Score8.1

CVSS 26.4

CVSS 3.18.2

EPSS0.0034