CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-23440

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.7%

CVSS Severity

CVSS v3 Score 7.3

CVSS v2 Score 7.5

References

Products affected by CVE-2021-23440

Oracle » Communications Cloud Native Core Policy » Version: 1.14.0

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0
Set-Value Project » Set-Value » Version: N/A

cpe:2.3:a:set-value_project:set-value:-
Set-Value Project » Set-Value » Version: 0.1.0

cpe:2.3:a:set-value_project:set-value:0.1.0
Set-Value Project » Set-Value » Version: 0.1.1

cpe:2.3:a:set-value_project:set-value:0.1.1
Set-Value Project » Set-Value » Version: 0.1.2

cpe:2.3:a:set-value_project:set-value:0.1.2
Set-Value Project » Set-Value » Version: 0.1.3

cpe:2.3:a:set-value_project:set-value:0.1.3
Set-Value Project » Set-Value » Version: 0.1.4

cpe:2.3:a:set-value_project:set-value:0.1.4
Set-Value Project » Set-Value » Version: 0.1.6

cpe:2.3:a:set-value_project:set-value:0.1.6
Set-Value Project » Set-Value » Version: 0.2.0

cpe:2.3:a:set-value_project:set-value:0.2.0
Set-Value Project » Set-Value » Version: 0.3.0

cpe:2.3:a:set-value_project:set-value:0.3.0
Set-Value Project » Set-Value » Version: 0.3.1

cpe:2.3:a:set-value_project:set-value:0.3.1
Set-Value Project » Set-Value » Version: 0.3.2

cpe:2.3:a:set-value_project:set-value:0.3.2
Set-Value Project » Set-Value » Version: 0.3.3

cpe:2.3:a:set-value_project:set-value:0.3.3
Set-Value Project » Set-Value » Version: 0.4.0

cpe:2.3:a:set-value_project:set-value:0.4.0
Set-Value Project » Set-Value » Version: 0.4.1

cpe:2.3:a:set-value_project:set-value:0.4.1
Set-Value Project » Set-Value » Version: 0.4.2

cpe:2.3:a:set-value_project:set-value:0.4.2
Set-Value Project » Set-Value » Version: 0.4.3

cpe:2.3:a:set-value_project:set-value:0.4.3
Set-Value Project » Set-Value » Version: 1.0.0

cpe:2.3:a:set-value_project:set-value:1.0.0
Set-Value Project » Set-Value » Version: 2.0.0

cpe:2.3:a:set-value_project:set-value:2.0.0
Set-Value Project » Set-Value » Version: 3.0.0

cpe:2.3:a:set-value_project:set-value:3.0.0
Set-Value Project » Set-Value » Version: 3.0.1

cpe:2.3:a:set-value_project:set-value:3.0.1
Set-Value Project » Set-Value » Version: 3.0.2

cpe:2.3:a:set-value_project:set-value:3.0.2
Set-Value Project » Set-Value » Version: 4.0.0

cpe:2.3:a:set-value_project:set-value:4.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-23440

Products

Pricing

Contact Us