CVE-2022-0432 HIGH

CVE-2022-0432: Prototype Pollution in mastodon/mastodon

Vendor Mastodon
Product mastodon/mastodon
Weakness CWE-1321
Published February 2, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

7.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

What the vulnerability does

01Description

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.

Key dates

02Disclosure timeline

February 2, 2022 CVE published
August 2, 2024 Record updated