Lucene search
K

7 matches found

Veracode
Veracode
added 2024/07/02 8:0 a.m.17 views

Prototype Pollution

fast-loops is vulnerable to Prototype Pollution. The vulnerability is due to missing checks in the objectMergeDeep function, allowing attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

10CVSS7.7AI score0.00164EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/07/01 3:32 p.m.14 views

GHSA-3Q56-9CC2-46J4 robinweser fast-loops vulnerable to prototype pollution

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.7CVSS8.4AI score0.00164EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/07/01 3:32 p.m.58 views

robinweser fast-loops vulnerable to prototype pollution

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

10CVSS8.1AI score0.00164EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/07/01 1:15 p.m.15 views

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

10CVSS0.00164EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.19 views

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00164EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/01 12:0 a.m.4 views

PT-2024-5583 · Ibm · Ibm Qradar Suite +1

Name of the Vulnerable Software and Affected Versions: robinweser fast-loops version 1.1.3 IBM QRadar Suite affected versions not specified IBM Cloud Pak for Security affected versions not specified Description: The issue is related to an uncontrolled modification of object prototype attributes i...

10CVSS7.1AI score0.00164EPSS
Exploits0References12
Vulnrichment
Vulnrichment
added 2024/07/01 12:0 a.m.13 views

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

7.8AI score0.00164EPSS
Exploits0References1
Rows per page
Query Builder