Lucene search

K
nvd[email protected]NVD:CVE-2023-6293
HistoryNov 24, 2023 - 8:15 p.m.

CVE-2023-6293

2023-11-2420:15:07
CWE-1321
web.nvd.nist.gov
2
github repository
prototype pollution
vulnerability

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

EPSS

0

Percentile

15.5%

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.

Affected configurations

Nvd
Node
sequelizejssequelize-typescriptRange<2.1.6node.js
VendorProductVersionCPE
sequelizejssequelize-typescript*cpe:2.3:a:sequelizejs:sequelize-typescript:*:*:*:*:*:node.js:*:*

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

EPSS

0

Percentile

15.5%

Related for NVD:CVE-2023-6293