Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/10/26 12:0 p.m.34 views

Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution

Feather-Sequelize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution RCE with privileges of application...

10CVSS9.2AI score0.01394EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder