Lucene search
+L

3 matches found

OSV
OSV
added 2019/12/04 9:25 p.m.36 views

GHSA-RH46-3FGC-MVRF Validation bypass is possible in Json Pattern Validator

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

5.3CVSS5AI score0.00974EPSS
SaveExploits1References3
NVD
NVD
added 2019/12/02 5:15 p.m.26 views

CVE-2019-19507

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

5.3CVSS5.1AI score0.00974EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2019/12/02 4:17 p.m.28 views

CVE-2019-19507

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

5.1AI score0.00974EPSS
SaveExploits1References2
Rows per page
Query Builder