Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Json Pattern Validator Project Subscribe
Filtered by product Json Pattern Validator
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-17479 1 Json Pattern Validator Project 1 Json Pattern Validator 2020-08-19 7.5 HIGH 9.8 CRITICAL
jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.
CVE-2019-19507 1 Json Pattern Validator Project 1 Json Pattern Validator 2019-12-19 5.0 MEDIUM 5.3 MEDIUM
In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.