Lucene search
+L

8 matches found

Veracode
Veracode
•added 2024/07/02 8:00 a.m.•26 views

Prototype Pollution

fast-loops is vulnerable to Prototype Pollution. The vulnerability is due to missing checks in the objectMergeDeep function, allowing attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

10CVSS7.7AI score0.00918EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2024/07/01 3:32 p.m.•69 views

robinweser fast-loops vulnerable to prototype pollution

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

10CVSS8.1AI score0.00918EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/07/01 3:32 p.m.•52 views

GHSA-3Q56-9CC2-46J4 robinweser fast-loops vulnerable to prototype pollution

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.7CVSS8.4AI score0.00918EPSS
SaveExploits0References4
NVD
NVD
•added 2024/07/01 1:15 p.m.•38 views

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

10CVSS0.00918EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•45 views

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00918EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•15 views

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

7.8AI score0.00918EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•1 views

CVE-2024-39008: Improperly Controlled Modification of Object Prototype Attributes

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

10CVSS7.5AI score0.00918EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•19 views

PT-2024-5583 · Ibm · Ibm Qradar Suite +1

Name of the Vulnerable Software and Affected Versions: robinweser fast-loops version 1.1.3 IBM QRadar Suite affected versions not specified IBM Cloud Pak for Security affected versions not specified Description: The issue is related to an uncontrolled modification of object prototype attributes i...

10CVSS7.1AI score0.00918EPSS
SaveExploits0References12
Rows per page
Query Builder