What is GHSA-gcx5-3p5f-f8vp?

GHSA-gcx5-3p5f-f8vp is a security advisory published by GitHub Security Advisories with Medium severity. Prototype Pollution in jquery.cookie

Which CVE IDs does GHSA-gcx5-3p5f-f8vp cover?

GHSA-gcx5-3p5f-f8vp covers the following CVE IDs: CVE-2022-23395. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gcx5-3p5f-f8vp?

GHSA-gcx5-3p5f-f8vp has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-gcx5-3p5f-f8vp?

GHSA-gcx5-3p5f-f8vp affects 1 product, including: nuget/jquery.cookie:\u003c= 1.4.1.

GHSA-gcx5-3p5f-f8vpMediumCVSS 6.1

Prototype Pollution in jquery.cookie

Vendor

GitHub Security Advisories

Published

March 3, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2022-23395 →

📋 Description

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).

🎯 Affected products1

nuget/jquery.cookie:<= 1.4.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-23395
https://snyk.io/test/npm/jquery.cookie/1.4.1?tab=issues
https://security.netapp.com/advisory/ntap-20220325-0008/
https://github.com/advisories/GHSA-gcx5-3p5f-f8vp