Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:02 a.m.•12 views

CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

9.8CVSS7.8AI score0.01404EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/25 3:15 p.m.•17 views

CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

9.8CVSS7.5AI score0.01404EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/25 12:00 a.m.•23 views

CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

7.8AI score0.01404EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/25 12:00 a.m.•9 views

CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

7.8AI score0.01404EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•5 views

CVE-2024-29650: Improperly Controlled Modification of Object Prototype Attributes

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

9.8CVSS6.6AI score0.01404EPSS
SaveExploits0References2
Huntr
Huntr
•added 2021/01/26 12:00 a.m.•4 views

Prototype Pollution in thi-ng/umbrella

Description @thi.ng/paths is vulnerable to Prototype Pollution. The vulnerability is due to an incomplete fix. mutIn function does not have fix implemented. Proof of Concept 1. Create the following PoC file: javascript // poc.js const paths = require'@thi.ng/paths' console.log"Before: ", .pollute...

1.8AI score
SaveExploits0
Rows per page
Query Builder