Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2024/05/21 8:27 p.m.16 views

CVE-2024-29651

A prototype pollution flaw was found in the API Dev Tools json-schema-ref-parser. This flaw allows a remote attacker to cause a denial of service, Cross-site scripting, or arbitrary code via the bundle, parse, resolve, and dereference functions. Mitigation Mitigation for this issue is either not...

5.6CVSS8AI score0.02788EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/05/20 6:31 p.m.24 views

json-schema-ref-parser Prototype Pollution issue

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

8.1CVSS8.1AI score0.02788EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/05/20 6:31 p.m.14 views

GHSA-5F97-H2C2-826Q json-schema-ref-parser Prototype Pollution issue

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

8.1CVSS7AI score0.02788EPSS
Exploits0References4
NVD
NVD
added 2024/05/20 6:15 p.m.10 views

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

8.1CVSS7.4AI score0.02788EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/20 5:15 p.m.24 views

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

7.4AI score0.02788EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/20 5:15 p.m.9 views

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

7.8AI score0.02788EPSS
Exploits0References1
CVE
CVE
added 2024/05/20 5:15 p.m.124 views

CVE-2024-29651

CVE-2024-29651 is a Prototype Pollution vulnerability in API Dev Tools json-schema-ref-parser (versions 11.0.0 and 11.1.0). The flaw allows remote code execution or denial of service by manipulating Object.prototype via bundle(), parse(), resolve(), or dereference() functions. Affected IBM stack ...

8.1CVSS7.7AI score0.02788EPSS
Exploits0References1
Rows per page
Query Builder