Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38568
HistoryDec 23, 2022 - 4:42 a.m.

Information Disclosure

2022-12-2304:42:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
liquidjs
information disclosure
vulnerability
readproperty function
context.ts
ownpropertyonly parameter

0.001 Low

EPSS

Percentile

48.0%

liquidjs is vulnerable to information disclosure. The vulnerability exists in the readProperty function in context.ts, which will result in leaking properties of a prototype when the ownpropertyonly parameter is set to false.

CPENameOperatorVersion
liquidjsle9.43.0
liquidjsle9.43.0

0.001 Low

EPSS

Percentile

48.0%

Related for VERACODE:38568