Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/24 12:00 a.m.•5 views

CVE-2025-57324: Improperly Controlled Modification of Object Prototype Attributes

parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function of parse version 5.3.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of...

6.5CVSS5.9AI score0.0035EPSS
SaveExploits0References1
Rows per page
Query Builder