Lucene search
GitHub Advisory DatabaseGHSA-WJC4-73Q6-GV3MHistoryJan 03, 2024 - 6:30 a.m.
plotly.js prototype pollution vulnerability
2024-01-0306:30:27
CWE-1321
GitHub Advisory Database
github.com
18
plotly.js
prototype pollution
vulnerability
plot api
expandobjectpaths
nestedproperty
software
In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty.
| CPE | Name | Operator | Version |
|---|---|---|---|
| plotly.js | lt | 2.25.2 | |
| plotly/plotly.js | lt | 2.25.2 |
References
github.com/advisories/GHSA-wjc4-73q6-gv3m
github.com/plotly/plotly.js/commit/02498404c8ad7a3395191e65694fb142a37b0fe9
github.com/plotly/plotly.js/commit/5efd2a1f07a418b230a5626fc6c1c7929c47949d
github.com/plotly/plotly.js/releases/tag/v2.25.2
nvd.nist.gov/vuln/detail/CVE-2023-46308
plotly.com/javascript/
Related
veracode
veracode
Prototype Pollution
2024-01-04 09:51:12
cvelist
cvelist
CVE-2023-46308
2024-01-03 00:00:00
osv
osv
plotly.js prototype pollution vulnerability
2024-01-03 06:30:27
prion
prion
Code injection
2024-01-03 05:15:00
ibm
ibm
cve
cve
CVE-2023-46308
2024-01-03 05:15:11
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00