PT-2022-13718 · Axios · Axios

Published 2022-05-03 · Updated 2022-05-16 · CVE-2022-1214

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions axios versions prior to 0.26

Description The issue concerns exposure of sensitive information to an unauthorized actor.

Recommendations For versions prior to 0.26, update to version 0.26 or later to resolve the issue.

Exploit

Related Identifiers

CVE-2022-1214

Affected Products

Axios

References · 8

• 🔥 https://huntr.dev/bounties/ef7b4ab6-a3f6-4268-a21a-e7104d344607 · Exploit
• https://cve.org/CVERecord?id=CVE-2022-1214 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-1214 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1214 · Security Note
• https://ubuntu.com/security/CVE-2022-1214 · Vendor Advisory
• https://github.com/axios/axios/commit/c9aca7525703ab600eacd9e95fd7f6ecc9942616 · Note
• https://t.me/cvenotify/29598 · Telegram Post
• https://t.me/cibsecurity/41794 · Telegram Post