The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.
References
Link | Resource |
---|---|
https://github.com/advisories/GHSA-4xh4-v2pq-jvhm | Third Party Advisory |
https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm | Third Party Advisory |
Configurations
Information
Published : 2023-01-10 22:15
Updated : 2023-01-18 08:36
NVD link : CVE-2023-22963
Mitre link : CVE-2023-22963
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
personnummer
- personnummer