CVE-2019-18954

creationtimestamp| type| source ---|---|--- 2024-02-13 16:06:51+00:00| seen| https://t.me/ctinow/183908...

CVE-2019-18954

Pomelo v2.2.5 is affected by CVE-2019-18954, a prototype-pollution vulnerability where a malicious user input can overwrite internal attributes in template/game-server/app/servers/connector/handler/entryHandler.js, enabling external control of critical state data. The issue arises from conflictin...