9pings/CVE-2022-24999

PoC

"qs" prototype poisoning vulnerability ( CVE-2022-24999 )

view exploit source poc_in_githubauthor 9pingspublished 2022-04-18catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-24999UShigh7.5Exploit
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be use…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan