GSD-2022-29823

Vulnerability from gsd - Updated: 2023-12-13 01:19
Details
Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.
Aliases
Aliases
CVE-2022-29823
To clipboard 

{
  "GSD": {
    "alias": "CVE-2022-29823",
    "id": "GSD-2022-29823"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-29823"
      ],
      "details": "Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.",
      "id": "GSD-2022-29823",
      "modified": "2023-12-13T01:19:42.106295Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "csirt@divd.nl",
        "ID": "CVE-2022-29823",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Feathers-Sequalize",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.x",
                          "version_value": "6.3.4"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Feather js"
            }
          ]
        }
      },
      "credits": [
        {
          "lang": "en",
          "value": "Thomas Rinsma of Codean"
        },
        {
          "lang": "en",
          "value": "Kevin Valk of Codean"
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-1321",
                "lang": "eng",
                "value": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\"Prototype Pollution\")"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://csirt.divd.nl/DIVD-2022-00020",
            "refsource": "MISC",
            "url": "https://csirt.divd.nl/DIVD-2022-00020"
          },
          {
            "name": "https://csirt.divd.nl/CVE-2022-29823/",
            "refsource": "MISC",
            "url": "https://csirt.divd.nl/CVE-2022-29823/"
          }
        ]
      },
      "source": {
        "advisory": "DIVD-2022-00020",
        "discovery": "EXTERNAL"
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003e=6.0.0 \u003c6.3.4",
          "affected_versions": "All versions starting from 6.0.0 before 6.3.4",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-1321",
            "CWE-937"
          ],
          "date": "2023-07-28",
          "description": "Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.",
          "fixed_versions": [
            "6.3.4"
          ],
          "identifier": "CVE-2022-29823",
          "identifiers": [
            "CVE-2022-29823"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.3.4",
          "package_slug": "npm/feathers-sequelize",
          "pubdate": "2022-10-26",
          "solution": "Upgrade to version 6.3.4 or above.",
          "title": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-29823",
            "https://csirt.divd.nl/cases/DIVD-2022-00020",
            "https://csirt.divd.nl/cves/CVE-2022-29823/"
          ],
          "uuid": "4deb3c3d-a1fa-4828-a58b-32c03811fa2e"
        }
      ]
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:feathersjs:feathers-sequelize:*:*:*:*:*:node.js:*:*",
                    "matchCriteriaId": "D774E13F-E66A-4F0B-9AE2-55671506913E",
                    "versionEndExcluding": "6.3.4",
                    "versionStartIncluding": "6.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application."
          },
          {
            "lang": "es",
            "value": "El m\u00e9todo cleanQuery de Feather-Sequalize usa una l\u00f3gica recursiva no segura para filtrar las claves no soportadas del objeto de consulta. Esto resulta en una ejecuci\u00f3n de c\u00f3digo remota (RCE) con privilegios de la aplicaci\u00f3n"
          }
        ],
        "id": "CVE-2022-29823",
        "lastModified": "2024-01-02T19:15:09.513",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 10.0,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 6.0,
              "source": "csirt@divd.nl",
              "type": "Secondary"
            }
          ]
        },
        "published": "2022-10-26T10:15:16.190",
        "references": [
          {
            "source": "csirt@divd.nl",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://csirt.divd.nl/CVE-2022-29823/"
          },
          {
            "source": "csirt@divd.nl",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://csirt.divd.nl/DIVD-2022-00020"
          }
        ],
        "sourceIdentifier": "csirt@divd.nl",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-1321"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-1321"
              }
            ],
            "source": "csirt@divd.nl",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.