Vulnerabilities > CVE-2021-23566 - Incorrect Type Conversion or Cast vulnerability in Nanoid Project Nanoid

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

nanoid-project

CWE-704

NVD

Published: 2022-01-14

Updated: 2024-11-21

Summary

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

Vulnerable Configurations

Part	Description	Count
Application	Nanoid_Project Nanoid Project Nanoid 3.0.0 Nanoid Project Nanoid 3.0.1 Nanoid Project Nanoid 3.0.2 Nanoid Project Nanoid 3.1.0 Nanoid Project Nanoid 3.1.1 Nanoid Project Nanoid 3.1.2 Nanoid Project Nanoid 3.1.4 Nanoid Project Nanoid 3.1.5 Nanoid Project Nanoid 3.1.6 Nanoid Project Nanoid 3.1.7 Nanoid Project Nanoid 3.1.8 Nanoid Project Nanoid 3.1.9 Nanoid Project Nanoid 3.1.10 Nanoid Project Nanoid 3.1.11 Nanoid Project Nanoid 3.1.12 Nanoid Project Nanoid 3.1.13 Nanoid Project Nanoid 3.1.14 Nanoid Project Nanoid 3.1.15 Nanoid Project Nanoid 3.1.16 Nanoid Project Nanoid 3.1.17 Nanoid Project Nanoid 3.1.18 Nanoid Project Nanoid 3.1.19 Nanoid Project Nanoid 3.1.20 Nanoid Project Nanoid 3.1.21 Nanoid Project Nanoid 3.1.22 Nanoid Project Nanoid 3.1.23 Nanoid Project Nanoid 3.1.24 Nanoid Project Nanoid 3.1.25 Nanoid Project Nanoid 3.1.26 Nanoid Project Nanoid 3.1.27 Nanoid Project Nanoid 3.1.28 Nanoid Project Nanoid 3.1.29 Nanoid Project Nanoid 3.1.30	33

Common Weakness Enumeration (CWE)

CWE-704 - Incorrect Type Conversion or Cast

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References