Lucene search
PRIOn knowledge basePRION:CVE-2022-37601HistoryOct 12, 2022 - 8:15 p.m.
Code injection
2022-10-1220:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
prototype pollution
webpack loader-utils
nvd
Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils 2.0.0 via the name variable in parseQuery.js.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 10.0 | |
| loader-utils | lt | 1.4.1 | |
| loader-utils | ge | 2.0.0 | |
| loader-utils | lt | 2.0.3 |
References
users.encs.concordia.ca/~mmannan/publications/JS-vulnerability-aisaccs2022.pdf
dl.acm.org/doi/abs/10.1145/3488932.3497769
dl.acm.org/doi/pdf/10.1145/3488932.3497769
github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/parseQuery.js
github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/parseQuery.js
github.com/webpack/loader-utils/issues/212
github.com/webpack/loader-utils/issues/212
github.com/xmldom/xmldom/issues/436
lists.debian.org/debian-lts-announce/2022/12/msg00044.html
Related
cbl_mariner
cbl_mariner
CVE-2022-37601 affecting package reaper for versions less than 3.1.1-3
2023-05-03 16:09:29
CVE-2022-37601 affecting package reaper for versions less than 3.1.1-7
2024-03-19 17:21:46
openvas
openvas
Debian: Security Advisory (DLA-3258-1)
2023-01-01 00:00:00
osv
osv
node-loader-utils - security update
2022-12-31 00:00:00
CVE-2022-37601
2022-10-12 20:15:11
Prototype pollution in webpack loader-utils
2022-10-13 12:00:28
ibm
ibm
Security Bulletin: Decision Optimization in IBM Cloud Pak for Data is vulnerable to webpack loader-utils vulnerability [CVE-2022-37601]
2023-01-13 08:40:45
Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to webpack loader-utils vulnerability [CVE-2022-37601]
2023-01-03 09:08:57
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:31:54
debiancve
debiancve
CVE-2022-37601
2022-10-12 20:15:11
ubuntucve
ubuntucve
CVE-2022-37601
2022-10-12 00:00:00
nvd
nvd
CVE-2022-37601
2022-10-12 20:15:11
cvelist
cvelist
CVE-2022-37601
2022-10-12 00:00:00
debian
debian
[SECURITY] [DLA 3258-1] node-loader-utils security update
2022-12-31 16:24:24
nessus
nessus
Debian DLA-3258-1 : node-loader-utils - LTS security update
2023-01-01 00:00:00
RHEL 7 : loader-utils (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : loader-utils (Unpatched Vulnerability)
2024-05-11 00:00:00
cve
cve
CVE-2022-37601
2022-10-12 20:15:11
redhatcve
redhatcve
CVE-2022-37601
2022-11-28 18:30:56
veracode
veracode
Prototype Pollution
2022-11-16 05:59:29
github
github
Prototype pollution in webpack loader-utils
2022-10-13 12:00:28
redos
redos
ROS-20240704-07
2024-07-04 00:00:00
redhat
redhat