Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-RX62-5CW6-X29Q
HistoryJun 18, 2023 - 9:30 a.m.

Whaleal IceFrog is vulnerable to deserialization

2023-06-1809:30:17
CWE-502
GitHub Advisory Database
github.com
7
whaleal icefrog
v1.1.8
aviator template engine
deserialization vulnerability
untrusted data

CVSS2

5.2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

82.4%

JSON

Whaleal IceFrog v1.1.8 component Aviator Template Engine is vulnerable to deserialization of untrusted data. The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Affected configurations

Vulners
Node
com.whaleal.icefrogicefrog-allRange≤1.1.8
VendorProductVersionCPE
com.whaleal.icefrogicefrog-all*cpe:2.3:a:com.whaleal.icefrog:icefrog-all:*:*:*:*:*:*:*:*

Related

nvd 1
veracode 1
prion 1
cvelist 1
cve 1
osv 1
vulnrichment 1
nvd
nvd
CVE-2023-3308
2023-06-18 09:15:09
veracode
veracode
Deserialization Of Untrusted Data
2023-06-27 08:48:03
prion
prion
Deserialization of untrusted data
2023-06-18 09:15:00
cvelist
cvelist
CVE-2023-3308 whaleal IceFrog Aviator Template Engine deserialization
2023-06-18 09:00:03
cve
cve
CVE-2023-3308
2023-06-18 09:15:09
osv
osv
Whaleal IceFrog is vulnerable to deserialization
2023-06-18 09:30:17
vulnrichment
vulnrichment
CVE-2023-3308 whaleal IceFrog Aviator Template Engine deserialization
2023-06-18 09:00:03

CVSS2

5.2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

82.4%

JSON
Related for GHSA-RX62-5CW6-X29Q
nvd1veracode1prion1cvelist1cve1osv1vulnrichment1