CVE-2022-25645 - OpenCVE

All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protorype. By crafting a malicious object, it is possible to bypass this check and achieve prototype pollution.

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:M/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Dset Project	Dset

Configuration 1 [-]

cpe:2.3:a:dset_project:dset:*:*:*:*:*:node.js:*:*

References

Link	Resource
https://github.com/lukeed/dset/blob/master/src/merge.js%23L9	Broken Link
https://github.com/lukeed/dset/pull/38
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2431974	Exploit Third Party Advisory
https://snyk.io/vuln/SNYK-JS-DSET-2330881	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: snyk

Published: 2022-05-01T00:00:00

Updated: 2023-09-12T07:06:07.655623

Reserved: 2022-02-24T00:00:00

Link: CVE-2022-25645

JSON object: View

NVD Information

Status : Modified

Published: 2022-05-01T16:15:08.547

Modified: 2023-09-12T08:15:13.080

Link: CVE-2022-25645

JSON object: View

Redhat Information

No data.

CWE

CWE-1321

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dset_project:dset:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "51901AFD-8ABE-400D-8F04-FF2617D3B893", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protorype. By crafting a malicious object, it is possible to bypass this check and achieve prototype pollution."}, {"lang": "es", "value": "Todas las versiones del paquete dset son vulnerables a una Contaminaci\u00f3n de Prototipos por medio del modo \"dset/merge\", ya que la funci\u00f3n dset comprueba la contaminaci\u00f3n de prototipos al comprobar si la ruta de nivel superior contiene __proto__, constructor o protorype. Si es dise\u00f1ado un objeto malicioso, es posible omitir esta comprobaci\u00f3n y conseguir una contaminaci\u00f3n de prototipos"}], "id": "CVE-2022-25645", "lastModified": "2023-09-12T08:15:13.080", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 4.2, "source": "report@snyk.io", "type": "Secondary"}]}, "published": "2022-05-01T16:15:08.547", "references": [{"source": "report@snyk.io", "tags": ["Broken Link"], "url": "https://github.com/lukeed/dset/blob/master/src/merge.js%23L9"}, {"source": "report@snyk.io", "url": "https://github.com/lukeed/dset/pull/38"}, {"source": "report@snyk.io", "tags": ["Exploit", "Third Party Advisory"], "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2431974"}, {"source": "report@snyk.io", "tags": ["Exploit", "Third Party Advisory"], "url": "https://snyk.io/vuln/SNYK-JS-DSET-2330881"}], "sourceIdentifier": "report@snyk.io", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1321"}], "source": "nvd@nist.gov", "type": "Primary"}]}