Beveiligingsadvies

CVE-2022-42743

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-03 00:00:00

Laatst bijgewerkt 2025-12-03 20:01:04

Toegewezen door Fluid Attacks

CVSS-score 5.3

Status PUBLISHED

Beschrijving

deep-parse-json version 1.0.2 allows an external attacker to edit or add new properties to an object. This is possible because the application does not correctly validate the incoming JSON keys, thus allowing the '__proto__' property to be edited.

← Alle CVE's bekijken Bekijk op cve.org ↗