Lucene search
K

6 matches found

OSV
OSV
added 2024/07/01 3:32 p.m.7 views

GHSA-WHPX-G542-7C7V @cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.8AI score0.00349EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/07/01 3:32 p.m.11 views

@cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS8.4AI score0.00349EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/07/01 1:15 p.m.7 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS0.00349EPSS
Exploits0References1
CVE
CVE
added 2024/07/01 12:0 a.m.44 views

CVE-2024-39018

CVE-2024-39018 affects harvey-woo cat5th/key-serializer v0.2.5. The root cause is a prototype pollution flaw in the query function, enabling attackers to inject properties and potentially execute arbitrary code or cause a Denial of Service. Multiple sources (NVD, Red Hat, Veracode, GHSA, osv, CVE...

6.3CVSS8.3AI score0.00349EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.12 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00349EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/01 12:0 a.m.16 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00349EPSS
Exploits0References1
Rows per page
Query Builder