70 matches found
Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen
querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handlertype, name, fn can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks...
GHSA-8QPM-5C82-RF96 Prototype Pollution in backbone-query-parameters
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype...
CVE-2021-20086
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype...
Buffer overflow
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype...
CVE-2021-20085
CVE-2021-20085 affects backbone-query-parameters 0.4.0 and describes a prototype pollution flaw: improperly controlled modification of Object.prototype that enables a malicious user to inject properties into Object.prototype. The connected documents consistently reference this vulnerability and i...
CVE-2021-20089
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...
CVE-2021-20089
CVE-2021-20089 affects purl 2.3.2, where improper modification of Object.prototype attributes enables prototype pollution. Root cause: input handling allows injecting properties into Object.prototype; this can impact confidentiality, integrity, and availability (per CVSS3.1 metrics). The availabl...
Exploit for Prototype Pollution in Apache Struts
What's this This is a Simple test Project for S2-059 which ca...