Lucene search
+L

6 matches found

Veracode
Veracode
•added 2024/07/02 6:36 a.m.•18 views

Prototype Pollution

@airvertco/frappejs is vulnerable to Prototype Pollution. The vulnerability is due to passing the function registerView with an argument containing a special property proto to pollute the object, which allows attackers to alter the behavior of all objects inheriting from the affected prototype...

8.8CVSS6.7AI score0.00822EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•2 views

CVE-2024-38992: Improperly Controlled Modification of Object Prototype Attributes

airvertco frappejs v0.0.11 was discovered to contain a prototype pollution via the function registerView. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS8.2AI score0.00822EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/01 12:00 a.m.•62 views

CVE-2024-38992

airvertco frappejs version v0.0.11 is vulnerable to a prototype pollution flaw within the registerView function. The issue occurs when the function is passed an argument containing a special proto property, allowing an attacker to inject arbitrary properties and alter the behavior of all object...

8.8CVSS8.3AI score0.00822EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•16 views

PT-2024-28308 · Airvertco · Airvertco Frappejs

Name of the Vulnerable Software and Affected Versions: airvertco frappejs version 0.0.11 Description: The issue is related to a prototype pollution vulnerability via the registerView function. This allows attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary...

8.8CVSS8AI score0.00822EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•11 views

CVE-2024-38992

airvertco frappejs v0.0.11 was discovered to contain a prototype pollution via the function registerView. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.4AI score0.00822EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•38 views

CVE-2024-38992

airvertco frappejs v0.0.11 was discovered to contain a prototype pollution via the function registerView. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00822EPSS
SaveExploits0References1
Rows per page
Query Builder