Lucene search
+L

46 matches found

CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•18 views

Jointjs Security Vulnerability

A security vulnerability exists in jointjs before 3.3.0, which stems from the use of a path that accesses an object's key and sets a value that is not properly handled...

9.8CVSS5.8AI score0.01359EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/19 12:00 a.m.•5 views

CVE-2020-28479: Undefined Security Weakness

The package jointjs before 3.3.0 are vulnerable to Denial of Service DoS via the unsetByPath function...

7.5CVSS5.8AI score0.02047EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•18 views

Jointjs Code Issue Vulnerability

A code issue vulnerability exists in jointjs before 3.3.0 that stems from a denial of service DoS attack on the unsetByPath function...

7.5CVSS7.2AI score0.02047EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•2 views

PT-2021-11543

Name of the Vulnerable Software and Affected Versions: jointjs versions prior to 3.3.0 Description: The issue arises from the util.setByPath function, where the path used to access the object's key and set the value is not properly sanitized. This leads to a Prototype Pollution, allowing potentia...

9.8CVSS5.5AI score0.01359EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/19 12:00 a.m.•5 views

CVE-2020-28480: Undefined Security Weakness

The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath. The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution...

9.8CVSS5.8AI score0.01359EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•5 views

PT-2021-11542

Name of the Vulnerable Software and Affected Versions: jointjs versions prior to 3.3.0 Description: The issue is related to a Denial of Service DoS that can be triggered via the unsetByPath function. This allows an attacker to potentially disrupt service availability. Recommendations: For version...

7.5CVSS5.8AI score0.02047EPSS
SaveExploits0References9
Rows per page
Query Builder