Information Disclosure

🗓️ 17 Jan 2022 11:03:13Reported by Veracode Vulnerability DatabaseType

nanoid vulnerability in `valueOf()` function allows information disclosur

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: Nanoid as used by IBM QRadar Use Case Manager App is vulnerable to information disclosure (CVE-2021-23566)	16 Jun 202218:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	19 Oct 202221:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data Version is affected by multiple vulnerabilties	12 Dec 202317:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to the Improper Removal of Sensitive Information Before Storage or Transfer in Grafana (CVE-2021-23566)	19 Jul 202422:30	–	ibm
Circl	CVE-2021-23566	14 Jan 202222:19	–	circl
CNNVD	nanoid 代码问题漏洞	14 Jan 202200:00	–	cnnvd
CNVD	nanoid information leakage vulnerability	18 Jan 202200:00	–	cnvd
CVE	CVE-2021-23566	14 Jan 202220:05	–	cve

Vulners

Node

AND

node-postcss node-postcssMatch8.2.1+~cs5.3.23-5debian

AND

AND

nanoid_project nanoidRange3.1.12–3.1.30js

nanoid_project nanoidRange3.0.0–3.1.30js

Source	Link
github	www.github.com/ai/nanoid/commit/2b7bd9332bc49b6330c7ddb08e5c661833db2575
github	www.github.com/ai/nanoid/pull/328
gist	www.gist.github.com/artalar/bc6d1eb9a3477d15d2772e876169a444

13 Jul 2022 12:49Current

2.1Low risk

Vulners AI Score2.1

CVSS 3.14 - 5.5

CVSS 22.1

EPSS0.00027