Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: DIVD
Published: 2022-10-25T00:00:00
Updated: 2024-08-06T12:32:53.203Z
Reserved: 2022-07-15T00:00:00
Link: CVE-2022-2421
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-10-26T10:15:16.780
Modified: 2024-01-02T19:15:09.597
Link: CVE-2022-2421
Redhat
No data.