Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2024/07/01 3:32 p.m.•30 views

@cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.8AI score0.00419EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2024/07/01 3:32 p.m.•82 views

GHSA-WHPX-G542-7C7V @cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.8AI score0.00419EPSS
SaveExploits0References3
NVD
NVD
•added 2024/07/01 1:15 p.m.•50 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS0.00419EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/01 12:00 a.m.•72 views

CVE-2024-39018

The harvey-woo cat5th/key-serializer library, specifically version v0.2.5 , contains a prototype pollution vulnerability. The root cause is identified in functions such as query , set , default.query , and default.set , where passing crafted arguments with the proto property allows an attacker to...

6.3CVSS6.8AI score0.00419EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•21 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.8AI score0.00419EPSS
SaveExploits0References1
Mend
Mend
•added 2024/07/01 12:00 a.m.•8 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.8AI score0.00419EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•54 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00419EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•9 views

CVE-2024-39018: Improperly Controlled Modification of Object Prototype Attributes

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.8AI score0.00419EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•11 views

PT-2024-28328

Name of the Vulnerable Software and Affected Versions harvey-woo cat5th/key-serializer version 0.2.5 Description The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through the function "query". This is a result of prototype...

6.3CVSS7AI score0.00419EPSS
SaveExploits0References5
Rows per page
Query Builder