Lucene search
GoogleOSV:CVE-2023-26132HistoryJun 10, 2023 - 5:15 a.m.
CVE-2023-26132
2023-06-1005:15:08
Google
osv.dev
4
dottie package
prototype pollution
set() function
/dottie.js file
vulnerable software
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file.
Related
osv
osv
dottie vulnerable to Prototype Pollution
2023-06-10 06:30:25
veracode
veracode
Prototype Pollution
2023-06-21 09:55:13
cve
cve
CVE-2023-26132
2023-06-10 05:15:08
debiancve
debiancve
CVE-2023-26132
2023-06-10 05:15:08
prion
prion
Design/Logic Flaw
2023-06-10 05:15:00
ubuntucve
ubuntucve
CVE-2023-26132
2023-06-10 00:00:00
github
github
dottie vulnerable to Prototype Pollution
2023-06-10 06:30:25
cvelist
cvelist
CVE-2023-26132
2023-06-10 05:00:01
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
Related for OSV:CVE-2023-26132