CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-23624

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.5%

CVSS Severity

CVSS v3 Score 5.6

CVSS v2 Score 7.5

References

https://github.com/deoxxa/dotty/commit/88f61860dcc274a07a263c32cbe9d44c24ef02d7
https://snyk.io/vuln/SNYK-JS-DOTTY-1577292
https://github.com/deoxxa/dotty/commit/88f61860dcc274a07a263c32cbe9d44c24ef02d7
https://snyk.io/vuln/SNYK-JS-DOTTY-1577292

Products affected by CVE-2021-23624

Dotty Project » Dotty » Version: N/A

cpe:2.3:a:dotty_project:dotty:-
Dotty Project » Dotty » Version: 0.0.1

cpe:2.3:a:dotty_project:dotty:0.0.1
Dotty Project » Dotty » Version: 0.0.2

cpe:2.3:a:dotty_project:dotty:0.0.2
Dotty Project » Dotty » Version: 0.1.0

cpe:2.3:a:dotty_project:dotty:0.1.0
Dotty Project » Dotty » Version: 0.1.1

cpe:2.3:a:dotty_project:dotty:0.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-23624

Products

Pricing

Contact Us