9pings/CVE-2022-24999

PoC

"qs" prototype poisoning vulnerability ( CVE-2022-24999 )

view exploit source poc_in_githubauthor 9pingspublished 2022-04-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-24999US	high7.5	15.6% (97th)	Exploit	2022-11-26
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be use…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.