exploitDog

CVE-2022-32265

Опубликовано: 03 июн. 2022

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.

Ссылки

https://github.com/wolkykim/qdecoder/pull/29
Patch
Third Party Advisory
https://github.com/wolkykim/qdecoder/pull/29/commits/ce7c8a7ac450a823a11b06508ef1eb7441241f81#diff-1c4e2f5adfa1ad30618e78ff459b2c0758ecf34278459ad0a8d58db4fec622ea
Patch
Third Party Advisory
https://github.com/wolkykim/qdecoder/releases/tag/v12.1.0
Release Notes
Third Party Advisory
https://github.com/wolkykim/qdecoder/pull/29
Patch
Third Party Advisory
https://github.com/wolkykim/qdecoder/pull/29/commits/ce7c8a7ac450a823a11b06508ef1eb7441241f81#diff-1c4e2f5adfa1ad30618e78ff459b2c0758ecf34278459ad0a8d58db4fec622ea
Patch
Third Party Advisory
https://github.com/wolkykim/qdecoder/releases/tag/v12.1.0
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qdecoder_project:qdecoder:*:*:*:*:*:*:*:*

Версия до 12.1.0 (исключая)

EPSS

Процентиль: 62%

0.00422

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-rxj4-jccr-pc43

CVSS3: 5.3

github

больше 3 лет назад

qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.

EPSS

Процентиль: 62%

0.00422

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo