Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-31147. PoCs published by amhar-hckr.
AI-analyzed exploit summary This repository contains a functional Python PoC for CVE-2022-31147, a path traversal vulnerability in the matthiasmullie/minify library. The script automates testing with various traversal payloads and heuristics to detect arbitrary file read vulnerabilities on both Linux and Windows systems.
Description
The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service (ReDoS) when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix for CVE-2021-43306. Users should upgrade to version 1.19.5 to receive a patch.
Exploits (1)
This repository contains a functional Python PoC for CVE-2022-31147, a path traversal vulnerability in the matthiasmullie/minify library. The script automates testing with various traversal payloads and heuristics to detect arbitrary file read vulnerabilities on both Linux and Windows systems.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H