Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x2jx-w3wm-9p3p

Опубликовано: 05 дек. 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.3

Описание

nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit

Nako3edit is the editor component of Nadeshiko 3, a programming language developed based on Japanese. Improper check or handling of exceptional conditions in Nako3edit v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to crash.

Пакеты

Наименование

nadesiko3

npm
Затронутые версииВерсия исправления

< 3.3.75

3.3.75

EPSS

Процентиль: 88%
0.03831
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-703
CWE-755

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to crash.

EPSS

Процентиль: 88%
0.03831
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-703
CWE-755