Lucene search
K

10 matches found

OSV
OSV
added 2021/04/13 3:24 p.m.20 views

GHSA-5PXJ-MHWJ-X5GV Prototype Pollution in asciitable.js

The package asciitable.js before 1.0.3 is vulnerable to Prototype Pollution via the main function. PoC js var a = require"asciitable.js"; var b = JSON.parse'"proto":"test":123'; a,b; console.log.test...

9.8CVSS9.4AI score0.00448EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2021/04/13 3:24 p.m.39 views

Prototype Pollution in asciitable.js

The package asciitable.js before 1.0.3 is vulnerable to Prototype Pollution via the main function. PoC js var a = require"asciitable.js"; var b = JSON.parse'"proto":"test":123'; a,b; console.log.test...

9.8CVSS8.9AI score0.00448EPSS
Exploits1References5Affected Software1
Veracode
Veracode
added 2021/01/05 1:25 a.m.15 views

Prototype Pollution

asciitable.js is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability in the default function in main to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

9.8CVSS4.3AI score0.00448EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2021/01/04 12:15 p.m.10 views

CVE-2020-7771

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

9.8CVSS7AI score
Exploits0References2
NVD
NVD
added 2021/01/04 12:15 p.m.16 views

CVE-2020-7771

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

9.8CVSS8AI score0.00448EPSS
Exploits1References2
Prion
Prion
added 2021/01/04 12:15 p.m.10 views

Design/Logic Flaw

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

7.5CVSS9.4AI score0.00448EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/04 11:50 a.m.12 views

CVE-2020-7771 Prototype Pollution

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

7.5CVSS9.5AI score0.00448EPSS
Exploits1References2
CVE
CVE
added 2021/01/04 11:50 a.m.36 views

CVE-2020-7771

Asciitable.js before 1.0.3 is vulnerable to Prototype Pollution via the main function. The vulnerability allows injecting properties into Object.prototype (e.g., proto ), which can lead to hijacking object properties and, in worst cases, DoS or remote code execution depending on the environment. ...

9.8CVSS8.6AI score0.00448EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/01/04 12:0 a.m.1 views

Victornpb Asciitable.js Security Vulnerability

Victornpb Asciitable is a Javascript-based codebase for generating Ascii tables from two-digit tables of strings by the individual developer of Victornpb. A security vulnerability exists in asciitable.js before 1.0.3, which stems from the vulnerability to prototype contamination in the main...

9.8CVSS7.3AI score0.00448EPSS
Exploits1References3
Snyk
Snyk
added 2020/11/12 5:10 p.m.4 views

Prototype Pollution

Overview asciitable.js is a Generate a ASCII Table from a bidimensional array of strings Affected versions of this package are vulnerable to Prototype Pollution via the main function. POC var a = require"asciitable.js"; var b = JSON.parse'"proto":"test":123'; a,b; console.log.test Details Prototy...

9.8CVSS9AI score0.00448EPSS
Exploits1References2
Rows per page
Query Builder