CVE-2022-24304
Apache HTTP Server XML Entity Injection Vulnerability
Description
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2564. Reason: This candidate is a duplicate of CVE-2022-2564. Notes: All CVE users should reference CVE-2022-2564 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
INFO
Published Date :
Aug. 26, 2022, 5:15 a.m.
Last Modified :
Nov. 7, 2023, 3:44 a.m.
Remotely Exploit :
No
Source :
[email protected]
Affected Products
The following products are affected by CVE-2022-24304
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Public PoC/Exploit Available at Github
CVE-2022-24304 has a 1 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
SAST Demo Projects - Intentionally vulnerable applications for demonstrating and evaluating Static Application Security Testing (SAST) tools
Python TypeScript Java
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-24304 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-24304 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by [email protected]
Nov. 07, 2023
Action Type Old Value New Value Changed Description ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2564. Reason: This candidate is a duplicate of CVE-2022-2564. Notes: All CVE users should reference CVE-2022-2564 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2564. Reason: This candidate is a duplicate of CVE-2022-2564. Notes: All CVE users should reference CVE-2022-2564 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage -
CVE Modified by [email protected]
Sep. 14, 2022
Action Type Old Value New Value Changed Description Schema in lib/schema.js in Mongoose before 6.4.6 is vulnerable to prototype pollution. ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2564. Reason: This candidate is a duplicate of CVE-2022-2564. Notes: All CVE users should reference CVE-2022-2564 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. Removed Reference https://github.com/Automattic/mongoose/blob/51e758541763b6f14569744ced15cc23ab8b50c6/lib/schema.js#L88-L141 [Patch, Third Party Advisory] Removed Reference https://github.com/Automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8 [Patch, Third Party Advisory] Removed Reference https://github.com/Automattic/mongoose/compare/6.4.5...6.4.6 [Release Notes, Third Party Advisory] -
CVE Rejected by [email protected]
Sep. 14, 2022
Action Type Old Value New Value -
Initial Analysis by [email protected]
Aug. 31, 2022
Action Type Old Value New Value Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Changed Reference Type https://github.com/Automattic/mongoose/blob/51e758541763b6f14569744ced15cc23ab8b50c6/lib/schema.js#L88-L141 No Types Assigned https://github.com/Automattic/mongoose/blob/51e758541763b6f14569744ced15cc23ab8b50c6/lib/schema.js#L88-L141 Patch, Third Party Advisory Changed Reference Type https://github.com/Automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8 No Types Assigned https://github.com/Automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8 Patch, Third Party Advisory Changed Reference Type https://github.com/Automattic/mongoose/compare/6.4.5...6.4.6 No Types Assigned https://github.com/Automattic/mongoose/compare/6.4.5...6.4.6 Release Notes, Third Party Advisory Added CWE NIST CWE-1321 Added CPE Configuration OR *cpe:2.3:a:mongoosejs:mongoose:*:*:*:*:*:node.js:*:* versions up to (excluding) 6.4.6