CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. See the original NVD description below for full technical details.
CVE
CVE-2022-2421
Severity
CRITICAL
CVSS
10
EPSS
1.12%
Original NVD Description
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
Related CVEs
Other vulnerabilities affecting the same vendor(s)