En resumen
- CVE-2022-25948 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a liquidjs (liquidjs), liquidjs.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.0%, mayor que el 63.0% de las vulnerabilidades.
- Solución: actualizar a 10.0.0 o posterior.
| Package | Affected versions | Patched versions |
|---|
| liquidjs | < 10.0.0
| 10.0.0
|
| liquidjs npm | < 10.0.0
| 10.0.0
|
Description
The package liquidjs before 10.0.0 is vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.
NVD description
The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free