PT-2022-24027

CVE-2022-37614

Published

2022-10-12

Updated

2025-05-15

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mockery.js (affected versions not specified)

Description The issue is related to a prototype pollution vulnerability in the enable function of mockery.js, specifically in the mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf. This vulnerability is exploited via the key variable in mockery.js.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Secdevlpr26

Vendors

Affected products

Weakness enumeration

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')

Related identifiers

CVE-2022-37614