CVE-2022-23623

    Dashboard / Vulnerabilities / CVE-2022-23623

    CVE-2022-23623

    Published: 7 Feb 2022Last Modified: 21 Oct 2026

    Summary: Validation bypass in frourio

    Details: Frourio is a full stack framework, for TypeScript. Frourio users who uses frourio version prior to v0.26.0 and integration with class-validator through `validators/` folder are subject to a input validation vulnerability. Validators do not work properly for request bodies and queries in specific situations and some input is not validated at all. Users are advised to update frourio to v0.26.0 or later and to install `class-transformer` and `reflect-metadata`.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23623.json, https://github.com/frouriojs/frourio/security/advisories/GHSA-8xxm-h73r-ghfj, https://nvd.nist.gov/vuln/detail/CVE-2022-23623, https://github.com/frouriojs/frourio/commit/7c19ac5363305b81b1c6b5232620228763d427af

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d62da34adedcb9264eff37d2409f5db00405fc85

    Affected versions

    v0.25.1
    v0.25.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-23623 | CVE-DB