GitHub Advisoryadvisory · NuGet

GHSA-qj93-37f5-mr29 Improper Input Validation in IpMatcher

CRITICAL Published 2022-05-17 Modified 2022-05-26 Official page ↗
Aliases
CVE-2021-33318
Ecosystem
NuGet
Packages
IpMatcher
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20, CWE-704
Reviewed
2022-05-25

Affected packages

• NuGet IpMatcher: < 1.0.4.2 → fixed in 1.0.4.2

Description

An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below (IpMatcher) and 4.1.3 and below (WatsonWebserver) due to insufficient validation of input IP addresses and netmasks against the internal Matcher list of IP addresses and subnets.

Related

Alias · CVE (1)

  • CVE-2021-33318 An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below (IpMatcher) and… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-704 Incorrect Type Conversion or Cast weakness

References