Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:33 a.m.•9 views

CVE-2024-39015

cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

9.8CVSS8.2AI score0.00691EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/07/02 8:10 a.m.•24 views

Prototype Pollution

@cafebazaar/hod is vulnerable to Prototype Pollution. The vulnerability is due to missing checks in the request function, allowing attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

9.8CVSS7.7AI score0.00691EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/07/01 1:15 p.m.•25 views

CVE-2024-39015

cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

9.8CVSS0.00691EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•30 views

CVE-2024-39015

cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00691EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•10 views

CVE-2024-39015

cafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00691EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/01 12:00 a.m.•60 views

CVE-2024-39015

The cafebazaar hod library, specifically version v0.4.14 , is vulnerable to a prototype pollution flaw located within the request function. This vulnerability exists because the function lacks proper checks, allowing an attacker to inject arbitrary properties into the application's prototype. Suc...

9.8CVSS8.3AI score0.00691EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•12 views

PT-2024-28325 · Unknown · Cafebazaar Hod

Name of the Vulnerable Software and Affected Versions: cafebazaar hod version 0.4.14 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the request function...

9.8CVSS8.2AI score0.00691EPSS
SaveExploits0References4
Rows per page
Query Builder