Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2022-46175
HistoryDec 26, 2022 - 5:05 a.m.

CVE-2022-46175

2022-12-2605:05:00
redhat.com
access.redhat.com
110
json5 package
flaw
attacker
unexpected keys
cve-2022-46175

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.006 Low

EPSS

Percentile

77.9%

JSON

A flaw was found in the json5 package. The affected version of the json5 package could allow an attacker to set arbitrary and unexpected keys on the object returned from JSON5.parse.

Related

openvas 3
nessus 12
ibm 20
osv 4
cvelist 1
veracode 1
nvd 1
ubuntu 1
github 2
debian 1
debiancve 1
prion 1
cve 1
fedora 1
ubuntucve 1
redhat 9
openvas
openvas
Fedora: Security Advisory for pgadmin4 (FEDORA-2023-e7297a4aeb)
2023-01-30 00:00:00
Ubuntu: Security Advisory (USN-6758-1)
2024-05-01 00:00:00
Debian: Security Advisory (DLA-3665-1)
2023-11-27 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : JSON5 vulnerability (USN-6758-1)
2024-04-30 00:00:00
Debian DLA-3665-1 : node-json5 - LTS security update
2023-11-25 00:00:00
Fedora 37 : pgadmin4 (2023-e7297a4aeb)
2023-01-29 00:00:00
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to [CVE-2022-46175]
2023-02-02 20:17:31
Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote authenticated attacker due to json5 (CVE-2022-46175)
2023-02-01 12:49:14
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to JSON5 code execution (CVE-2022-46175)
2023-02-21 16:06:12
osv
osv
node-json5 - security update
2023-11-25 00:00:00
Prototype Pollution in JSON5 via Parse Method
2022-12-29 01:51:03
node-json5 vulnerability
2024-04-30 10:50:09
cvelist
cvelist
CVE-2022-46175
2022-12-24 00:00:00
veracode
veracode
Prototype Pollution
2023-01-05 07:22:55
nvd
nvd
CVE-2022-46175
2022-12-24 04:15:08
ubuntu
ubuntu
JSON5 vulnerability
2024-04-30 00:00:00
github
github
Prototype Pollution in JSON5 via Parse Method
2022-12-29 01:51:03
Private vulnerability reporting now generally available
2023-04-19 16:00:41
debian
debian
[SECURITY] [DLA 3665-1] node-json5 security update
2023-11-25 22:33:10
debiancve
debiancve
CVE-2022-46175
2022-12-24 04:15:08
prion
prion
Cross site scripting
2022-12-24 04:15:00
cve
cve
CVE-2022-46175
2022-12-24 04:15:08
fedora
fedora
[SECURITY] Fedora 37 Update: pgadmin4-6.19-1.fc37
2023-01-30 01:27:10
ubuntucve
ubuntucve
CVE-2022-46175
2022-12-24 00:00:00
redhat
redhat
(RHSA-2023:0634) Moderate: Red Hat OpenShift (Logging Subsystem) security update
2023-02-09 13:59:38
(RHSA-2023:1044) Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 8
2023-03-01 21:38:46
(RHSA-2023:1045) Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 9
2023-03-01 21:38:48

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.006 Low

EPSS

Percentile

77.9%

JSON
Related for RH:CVE-2022-46175
openvas3nessus12ibm20osv4cvelist1veracode1nvd1ubuntu1github2debian1debiancve1prion1cve1fedora1ubuntucve1redhat9