7.5
CVSSv2

CVE-2021-23440

Published: 12/09/2021 Updated: 29/03/2022
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

This affects the package set-value prior to 4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

set-value project set-value

oracle communications cloud native core policy 1.14.0

Vendor Advisories

Synopsis Important: Red Hat OpenShift Data Foundation 4110 security, enhancement, & bugfix update Type/Severity Security Advisory: Important Topic Updated images that include numerous enhancements, security, and bug fixes are now available for Red Hat OpenShift Data Foundation 4110 on Red Hat Enterprise Linux 8Red Hat Product Securit ...
Debian Bug report logs - #994448 node-set-value: CVE-2021-23440 - type confusion allows bypass of CVE-2019-10747 Package: node-set-value; Maintainer for node-set-value is Debian Javascript Maintainers <pkg-javascript-devel@listsaliothdebianorg>; Source for node-set-value is src:node-set-value (PTS, buildd, popcon) Reporte ...
This affects the package set-value before 401 A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays ...