Lucene search

K
githubGitHub Advisory DatabaseGHSA-7PVX-4585-HQWW
HistoryNov 24, 2023 - 9:30 p.m.

sequelize-typescript Prototype Pollution vulnerability

2023-11-2421:30:28
CWE-1321
GitHub Advisory Database
github.com
7
github repository
robinbuschmann
software
vulnerability

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

15.5%

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.

Affected configurations

Vulners
Node
sequelizejssequelize-typescriptRange<2.1.6node.js
VendorProductVersionCPE
sequelizejssequelize-typescript*cpe:2.3:a:sequelizejs:sequelize-typescript:*:*:*:*:*:node.js:*:*

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

15.5%

Related for GHSA-7PVX-4585-HQWW