Vulnerabilities > CVE-2022-36034 - Unspecified vulnerability in Nitrado.Js Project Nitrado.Js

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

nitrado-js-project

NVD

Published: 2022-08-29

Updated: 2023-07-21

Summary

nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.

Vulnerable Configurations

Part	Description	Count
Application	Nitrado.Js_Project Nitrado.Js Project Nitrado.Js - Nitrado.Js Project Nitrado.Js 0.1.0 Nitrado.Js Project Nitrado.Js 0.1.1 Nitrado.Js Project Nitrado.Js 0.1.2 Nitrado.Js Project Nitrado.Js 0.1.3 Nitrado.Js Project Nitrado.Js 0.1.4 Nitrado.Js Project Nitrado.Js 0.1.5 Nitrado.Js Project Nitrado.Js 0.1.6 Nitrado.Js Project Nitrado.Js 0.1.7 Nitrado.Js Project Nitrado.Js 0.1.8 Nitrado.Js Project Nitrado.Js 0.1.9 Nitrado.Js Project Nitrado.Js 0.1.10 Nitrado.Js Project Nitrado.Js 0.1.11 Nitrado.Js Project Nitrado.Js 0.1.12 Nitrado.Js Project Nitrado.Js 0.1.13 Nitrado.Js Project Nitrado.Js 0.1.14 Nitrado.Js Project Nitrado.Js 0.1.15 Nitrado.Js Project Nitrado.Js 0.1.16 Nitrado.Js Project Nitrado.Js 0.1.17 Nitrado.Js Project Nitrado.Js 0.2.0 Nitrado.Js Project Nitrado.Js 0.2.1 Nitrado.Js Project Nitrado.Js 0.2.2 Nitrado.Js Project Nitrado.Js 0.2.3 Nitrado.Js Project Nitrado.Js 0.2.4	24

Summary

Vulnerable Configurations

References