Lucene search
GoogleOSV:CVE-2022-21803HistoryApr 12, 2022 - 4:15 p.m.
CVE-2022-21803
2022-04-1216:15:08
Google
osv.dev
13
cve-2022-21803
nconf package
memory engine
.set() function
nested json configuration
prototype pollution
software
This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to modify the properties on the Object.prototype.
Related
redhatcve
redhatcve
CVE-2022-21803
2022-04-12 20:00:53
github
github
Prototype Pollution in nconf
2022-04-13 00:00:30
ibm
ibm
cnvd
cnvd
nconf has unspecified vulnerabilities
2022-04-15 00:00:00
cvelist
cvelist
CVE-2022-21803 Prototype Pollution
2022-04-12 15:20:12
osv
osv
Prototype Pollution in nconf
2022-04-13 00:00:30
nvd
nvd
CVE-2022-21803
2022-04-12 16:15:08
prion
prion
Design/Logic Flaw
2022-04-12 16:15:00
veracode
veracode
Prototype Pollution
2022-04-13 03:18:28
cve
cve
CVE-2022-21803
2022-04-12 16:15:08
redhat
redhat
nessus
nessus
IBM Cognos Analytics Multiple Vulnerabilities (6616285)
2022-09-02 00:00:00