Em resumo
- CVE-2019-19507 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta json pattern validator (json pattern validator project), jpv.
- Chance de exploração nos próximos 30 dias (EPSS): 0.97%, maior que 62.3% das vulnerabilidades.
- Correção: atualize para 2.1.1 ou posterior.
Description
In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.
NVD description
In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.
Mais vulnerabilidades de json pattern validator
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free