{"api_version":"1","generated_at":"2026-07-23T15:41:46+00:00","cve":"CVE-2022-4742","urls":{"html":"https://cve.report/CVE-2022-4742","api":"https://cve.report/api/cve/CVE-2022-4742.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-4742","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-4742"},"summary":{"title":"CVE-2022-4742","description":"A vulnerability, which was classified as critical, has been found in json-pointer. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. The name of the patch is 859c9984b6c407fc2d5a0a7e47c7274daa681941. It is recommended to apply a patch to fix this issue. VDB-216794 is the identifier assigned to this vulnerability.","state":"PUBLIC","assigner":"cna@vuldb.com","published_at":"2022-12-26 08:15:00","updated_at":"2023-11-07 03:58:00"},"problem_types":["CWE-1321"],"metrics":[],"references":[{"url":"https://github.com/manuelstofer/json-pointer/pull/36","name":"https://github.com/manuelstofer/json-pointer/pull/36","refsource":"MISC","tags":[],"title":"Fix prototype pollution when pointer is not a string or number by hhomar · Pull Request #36 · manuelstofer/json-pointer · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://vuldb.com/?ctiid.216794","name":"https://vuldb.com/?ctiid.216794","refsource":"MISC","tags":[],"title":"","mime":"text/plain","httpstatus":"403","archivestatus":"404"},{"url":"https://vuldb.com/?id.216794","name":"https://vuldb.com/?id.216794","refsource":"MISC","tags":[],"title":"","mime":"text/plain","httpstatus":"403","archivestatus":"404"},{"url":"https://github.com/manuelstofer/json-pointer/commit/859c9984b6c407fc2d5a0a7e47c7274daa681941","name":"https://github.com/manuelstofer/json-pointer/commit/859c9984b6c407fc2d5a0a7e47c7274daa681941","refsource":"MISC","tags":[],"title":"Merge pull request #36 from hhomar/fix-prototype-pollution · manuelstofer/json-pointer@859c998 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4742","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4742","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"4742","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"json-pointer_project","cpe5":"json-pointer","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2022-4742","ASSIGNER":"cna@vuldb.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"A vulnerability, which was classified as critical, has been found in json-pointer. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. The name of the patch is 859c9984b6c407fc2d5a0a7e47c7274daa681941. It is recommended to apply a patch to fix this issue. VDB-216794 is the identifier assigned to this vulnerability."},{"lang":"deu","value":"Eine kritische Schwachstelle wurde in json-pointer entdeckt. Hierbei geht es um die Funktion set der Datei index.js. Mittels Manipulieren mit unbekannten Daten kann eine improperly controlled modification of object prototype attributes ('prototype pollution')-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Patch wird als 859c9984b6c407fc2d5a0a7e47c7274daa681941 bezeichnet. Als bestmögliche Massnahme wird Patching empfohlen."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')","cweId":"CWE-1321"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"json-pointer","version":{"version_data":[{"version_value":"n/a","version_affected":"="}]}}]}}]}},"references":{"reference_data":[{"url":"https://vuldb.com/?id.216794","refsource":"MISC","name":"https://vuldb.com/?id.216794"},{"url":"https://vuldb.com/?ctiid.216794","refsource":"MISC","name":"https://vuldb.com/?ctiid.216794"},{"url":"https://github.com/manuelstofer/json-pointer/pull/36","refsource":"MISC","name":"https://github.com/manuelstofer/json-pointer/pull/36"},{"url":"https://github.com/manuelstofer/json-pointer/commit/859c9984b6c407fc2d5a0a7e47c7274daa681941","refsource":"MISC","name":"https://github.com/manuelstofer/json-pointer/commit/859c9984b6c407fc2d5a0a7e47c7274daa681941"}]},"impact":{"cvss":[{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"},{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}]}},"nvd":{"publishedDate":"2022-12-26 08:15:00","lastModifiedDate":"2023-11-07 03:58:00","problem_types":["CWE-1321"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:json-pointer_project:json-pointer:*:*:*:*:*:*:*:*","versionEndExcluding":"2022-2-17","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}