En bref
- CVE-2022-25948 est une vulnérabilité MOYENNE (CVSS 5.3) touchant liquidjs (liquidjs), liquidjs.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.0%, plus élevée que 63.0% des vulnérabilités.
- Correctif : mettre à jour vers 10.0.0 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| liquidjs | < 10.0.0
| 10.0.0
|
| liquidjs npm | < 10.0.0
| 10.0.0
|
Description
The package liquidjs before 10.0.0 is vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.
NVD description
The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free