3 matches found
Prototype Pollution in locutus
Overview Versions of locutus prior to 2.0.12 are vulnerable to Prototype Pollution via the php.strings.parsestr function. Recommendation Upgrade to version 2.0.12 or later References - CVE - GitHub Advisory...
7.5CVSS4.9AI score0.02753EPSS
SaveExploits1Affected Software1
CVE-2020-7719
CVE-2020-7719 affects locutus versions before 2.0.12 and is due to a prototype pollution flaw exposed via the php.strings.parse_str function. The vulnerability is described across sources (NVD, npm advisory, OSV, GHSA) and is mitigated by upgrading locutus to 2.0.12 or later. If not upgrading, af...
9.8CVSS9.5AI score0.02753EPSS
SaveExploits1References2Affected Software1
20