8 matches found
CVE-2023-46308
In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...
Security Bulletin: There is a vulnerability in plotly.js used by IBM Maximo Asset Management application (CVE-2023-46308)
Summary There is a vulnerability in plotly.js used by IBM Maximo Asset Management application CVE-2023-46308 Vulnerability Details CVEID:CVE-2023-46308 DESCRIPTION: Plotly plotly.js could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw in the...
Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to execute arbitrary code on the system CVE-2023-46308
Summary plotly.js is used by the IBM Datapower Operations Dashboard in their web console. Vulnerability Details CVEID:CVE-2023-46308 DESCRIPTION: Plotly plotly.js could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw in the plot API calls. By...
SUSE CVE-2023-46308
In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...
@darajs/components (>=1.0.0-a.1, <=1.5.1), @datalayer-jupyter/widgets (>=0.0.5, <=0.0.6) +14 more potentially affected by CVE-2023-46308 via plotly.js (>=2.0.0, <=2.23.2)
plotly.js NPM version =2.0.0, =1.0.0-a.1, =0.0.5, =0.0.1, =0.47.0, =0.50.3, =1.0.0, =0.0.23, =1.33.0-rc.1, =1.0.0, =1.17.1, =0.1.3, =0.23.0, =1.0.0, =0.40.38, =0.40.80 and more Source cves: CVE-2023-46308 Source advisory: OSV:GHSA-WJC4-73Q6-GV3M...
CVE-2023-46308
In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...
CVE-2023-46308
CVE-2023-46308 affects the Plotly library plotly.js prior to 2.25.2. The issue is a prototype pollution flaw in the plot API calls (expandObjectPaths/nestedProperty) that could lead to remote code execution or denial of service. Public references indicate the fix is in plotly.js v2.25.2 and later...
