PT-2023-22654 · Vconsole · Vconsole

Zer0Dia · Publicado 2023-04-04 · Atualizado 2025-02-03 · CVE-2023-30363

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions vConsole version 3.15.0

Description The issue is related to a prototype pollution in vConsole due to incorrect key and value resolution in the setOptions function in core.ts. This can potentially lead to security issues.

Recommendations For vConsole version 3.15.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Prototype Pollution

Enumeração de Fraquezas

CWE-1321

Identificadores relacionados

BDU:2025-04732

CVE-2023-30363

GHSA-F737-3FH6-JF6W

Produtos afetados

Vconsole

Referências · 14

• 🔥 https://github.com/Tencent/vConsole/issues/616 · Exploit
• https://github.com/Tencent/vConsole/releases/tag/v3.15.1 · Nota
• https://github.com/Tencent/vConsole/commit/b91591703490e032451f7734212f6458bde9be6a · Nota
• https://github.com/Tencent/vConsole · Nota
• https://bdu.fstec.ru/vul/2025-04732 · Nota de Segurança
• https://t.me/cvenotify/49855 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-30363 · Aviso do Fabricante
• https://vuldb.com/?id.227561 · Nota
• https://vulert.com/vuln-db/CVE-2023-30363 · Nota
• https://t.me/cvenotify/109703 · Publicação no Telegram
• https://cwe.mitre.org/data/definitions/1321.html · Nota
• https://osv.dev/vulnerability/GHSA-f737-3fh6-jf6w · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-30363 · Nota de Segurança
• https://t.me/cibsecurity/62945 · Publicação no Telegram