Description

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string).

Remediation

References

https://github.com/rooseveltframework/teddy/releases/tag/0.5.9

https://snyk.io/vuln/SNYK-JS-TEDDY-1579557

https://github.com/rooseveltframework/teddy/pull/518

Related Vulnerabilities

CVE-2020-28499 Vulnerability in maven package org.webjars.npm:merge

CVE-2023-3894 Vulnerability in maven package com.fasterxml.jackson.dataformat:jackson-dataformat-properties

CVE-2022-23640 Vulnerability in maven package com.monitorjbl:xlsx-streamer

CVE-2018-8039 Vulnerability in maven package org.apache.cxf:cxf-rt-transports-http

CVE-2022-24728 Vulnerability in maven package org.webjars.npm:ckeditor4

Severity

High

Classification

CWE-843 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Release Notes Third Party Advisory Exploit Patch