Lucene search
GoogleOSV:CVE-2022-25354HistoryMar 17, 2022 - 12:15 p.m.
CVE-2022-25354
2022-03-1712:15:08
Google
osv.dev
4
vulnerability
package set-in
prototype pollution
setin method
The package set-in before 2.0.3 are vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-28273
Related
osv
osv
Prototype Pollution in set-in
2022-03-18 00:01:11
CVE-2020-28273
2020-12-02 15:15:12
Prototype pollution in set-in
2021-03-19 21:01:46
cvelist
cvelist
CVE-2022-25354 Prototype Pollution
2022-03-17 11:20:56
CVE-2020-28273
2020-12-02 14:34:07
github
github
Prototype Pollution in set-in
2022-03-18 00:01:11
Prototype pollution in set-in
2021-03-19 21:01:46
prion
prion
Design/Logic Flaw
2022-03-17 12:15:00
Remote code execution
2020-12-02 15:15:00
nvd
nvd
CVE-2022-25354
2022-03-17 12:15:08
CVE-2020-28273
2020-12-02 15:15:12
cve
cve
CVE-2022-25354
2022-03-17 12:15:08
CVE-2020-28273
2020-12-02 15:15:12
veracode
veracode
Prototype Pollution
2020-12-03 03:10:37
Prototype Pollution
2022-03-18 09:39:55
nodejs
nodejs
Prototype Pollution
2021-03-19 21:06:46
checkpoint_advisories
checkpoint_advisories