CVE-2022-25948

Information Exposure

Medium · published December 23, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Published
2022-12-23T23:03Z
EPSS history
Timeline
  • 23 DEC 23:03Z
    Information Exposure
    cvelistv5