Exploitation Summary
EIP tracks 2 public exploits for CVE-2022-24999. PoCs published by 9pings, n8tz.
AI-analyzed exploit summary This repository contains functional exploit code demonstrating CVE-2022-24999, a prototype pollution vulnerability in the 'qs' library. The PoC showcases how malicious payloads can create 'array-like' objects with manipulated lengths, leading to denial-of-service (DoS) conditions when processed by vulnerable Express applications.
Description
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: [email protected]" in its release description, is not vulnerable).
Exploits (2)
This repository contains functional exploit code demonstrating CVE-2022-24999, a prototype pollution vulnerability in the 'qs' library. The PoC showcases how malicious payloads can create 'array-like' objects with manipulated lengths, leading to denial-of-service (DoS) conditions when processed by vulnerable Express applications.
This repository contains a proof-of-concept exploit for CVE-2022-24999, demonstrating a denial-of-service (DoS) vulnerability in the 'qs' library used by Express.js. The exploit leverages prototype pollution and array/string manipulation to cause excessive CPU usage.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H