CVE-2022-35142 - An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter

HIGH

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter

Published Aug 4, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.55%

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.

Ecosystem	Package	Introduced	Fixed
npm	raneto	0	0.17.1

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

Link	Providers	Tags
http://raneto.com/		x_refsource_MISCProduct
https://cwe.mitre.org/data/definitions/703.html		x_refsource_MISCThird Party Advisory
https://gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/		x_refsource_MISCExploitPatchThird Party Advisory
https://github.com/advisories/GHSA-xxc2-j7jj-6g5m		Advisory
https://github.com/gilbitron/Raneto/releases		x_refsource_MISCThird Party Advisory
https://github.com/ryanlelek/Raneto/issues/368
https://github.com/ryanlelek/Raneto/pull/370
https://github.com/ryanlelek/Raneto/releases/tag/0.17.1
https://nvd.nist.gov/vuln/detail/CVE-2022-35142