PT-2022-8025 · Unknown · Express-Param
CVE-2017-20160
·
Published
2022-12-31
·
Updated
2024-05-17
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
flitto express-param versions up to 0.x
Description
A critical issue affects an unknown part of the file lib/fetchParams.js, leading to improper handling of extra parameters. The manipulation can be initiated remotely. Upgrading to version 1.0.0 addresses this issue.
Recommendations
Upgrading to version 1.0.0 is able to address this issue.
It is recommended to upgrade the affected component.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Express-Param