Information Exposure

2023-03-0808:22:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

nestjs

information exposure

vulnerability

client request sanitization

streamable-file.ts

dvi element

sensitive information

software

0.001 Low

EPSS

Percentile

32.6%

JSON

@nestjs/common, is vulnerable to information exposure. The vulnerability exists due to a lack of client request sanitization in the streamable-file.ts file, allowing an attacker to read sensitive information in the system through the DVI element.

CPENameOperatorVersion
@nestjs/commonle9.0.4
@nestjs/platform-expressle9.0.4
@nestjs/commonle9.0.4
@nestjs/platform-expressle9.0.4

Name	Operator	Version
@nestjs/common	le	9.0.4
@nestjs/platform-express	le	9.0.4
@nestjs/common	le	9.0.4
@nestjs/platform-express	le	9.0.4

References

github.com/nestjs/nest/commit/f59cf5e81ca73bcdf1b5b36713550fd93918db41

github.com/nestjs/nest/issues/9759

github.com/nestjs/nest/pull/9819

github.com/nestjs/nest/pull/9819/commits/f59cf5e81ca73bcdf1b5b36713550fd93918db41

0.001 Low

EPSS

Percentile

32.6%

JSON

Related for VERACODE:39590