Lucene search
+L

3 matches found

nodejs
nodejs
added 2021/05/06 6:13 p.m.74 views

Prototype Pollution in locutus

Overview Versions of locutus prior to 2.0.12 are vulnerable to Prototype Pollution via the php.strings.parsestr function. Recommendation Upgrade to version 2.0.12 or later References - CVE - GitHub Advisory...

7.5CVSS4.9AI score0.02753EPSS
SaveExploits1Affected Software1
CVE
CVE
added 2020/09/01 9:30 a.m.83 views

CVE-2020-7719

CVE-2020-7719 affects locutus versions before 2.0.12 and is due to a prototype pollution flaw exposed via the php.strings.parse_str function. The vulnerability is described across sources (NVD, npm advisory, OSV, GHSA) and is mitigated by upgrading locutus to 2.0.12 or later. If not upgrading, af...

9.8CVSS9.5AI score0.02753EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/09/01 9:30 a.m.51 views

CVE-2020-7719 Prototype Pollution

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parsestr function...

9.8CVSS9.5AI score0.02753EPSS
SaveExploits1References2
Rows per page
Query Builder