Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-6DBFB030ABA6793DD9EFA2E73E244084HistoryJun 17, 2024 - 12:00 a.m.
@akbr/update Prototype Pollution
2024-06-1700:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
3
akbr update 1.0.0
vulnerability
prototype pollution
update/index.js
software
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
6.7
Confidence
Low
akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js.
Affected configurations
Node
npmupdateRange≤1.0.0
Related
cvelist
cvelist
CVE-2024-36578
2024-06-17 00:00:00
osv
osv
@akbr/update Prototype Pollution
2024-06-17 18:31:34
vulnrichment
vulnrichment
CVE-2024-36578
2024-06-17 00:00:00
nvd
nvd
CVE-2024-36578
2024-06-17 16:15:15
cve
cve
CVE-2024-36578
2024-06-17 16:15:15
veracode
veracode
Prototype Pollution
2024-06-18 05:18:25
github
github
@akbr/update Prototype Pollution
2024-06-17 18:31:34
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
6.7
Confidence
Low
Related for GITLAB-6DBFB030ABA6793DD9EFA2E73E244084