CVE-2022-29823
Feathers - Query “__proto__” is converted to real prototype
| CVE | CVE-2022-29823 | |||||||||||
| Title | Feathers - Query “__proto__” is converted to real prototype | |||||||||||
| Case | DIVD-2022-00020 | |||||||||||
| Credits |
|
|||||||||||
| Affected products |
|
|||||||||||
| CVSS |
Base score:
10
(CRITICAL) |
|||||||||||
| References |
|
|||||||||||
| Problem type(s) | CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ("Prototype Pollution") | |||||||||||
| Date published | 24 Oct 2022 22:00 UTC | |||||||||||
| Last modified | 02 Jan 2024 18:32 UTC |
Description
Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.
JSON version.