ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 4
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 4
CVE-2022-2421
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
CVE-2022-2421
Due to improper type validation in attachment parsing the Socket.io js ...
GHSA-qm95-pgcg-qqfq
Insufficient validation when decoding a Socket.IO packet
BDU:2026-09400
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΊΠΎΠ΄ΠΈΡΠΎΠ²ΡΠΈΠΊΠ° ΠΈ Π΄Π΅ΠΊΠΎΠ΄ΠΈΡΠΎΠ²ΡΠΈΠΊΠ° ΠΏΠ°ΠΊΠ΅ΡΠΎΠ² socket.io parser Π±ΠΈΠ±Π»ΠΈΠΎΡΠ΅ΠΊΠΈ Socket.IO, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠ·Π²Π°ΡΡ ΠΎΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
 | CVE-2022-2421 Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object. | CVSS3: 10 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | ΠΏΠΎΡΡΠΈ 4 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ |
| CVE-2022-2421 Due to improper type validation in attachment parsing the Socket.io js ... | CVSS3: 10 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | ΠΏΠΎΡΡΠΈ 4 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ |
| GHSA-qm95-pgcg-qqfq Insufficient validation when decoding a Socket.IO packet | CVSS3: 9.8 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | ΠΏΠΎΡΡΠΈ 4 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ |
 | BDU:2026-09400 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΊΠΎΠ΄ΠΈΡΠΎΠ²ΡΠΈΠΊΠ° ΠΈ Π΄Π΅ΠΊΠΎΠ΄ΠΈΡΠΎΠ²ΡΠΈΠΊΠ° ΠΏΠ°ΠΊΠ΅ΡΠΎΠ² socket.io parser Π±ΠΈΠ±Π»ΠΈΠΎΡΠ΅ΠΊΠΈ Socket.IO, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠ·Π²Π°ΡΡ ΠΎΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ | CVSS3: 9.8 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | ΠΏΠΎΡΡΠΈ 4 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ