Lucene search
+L

1620 matches found

SUSE CVE
SUSE CVE
added 2025/07/21 11:25 p.m.8 views

SUSE CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

6.5CVSS7AI score0.01735EPSS
SaveExploits1References4
vulnersOsv
vulnersOsv
added 2025/07/21 7:4 p.m.10 views

7ghost-cli (>=1.17.6-next.0 <=1.18.4), @5ht/express (>=1.0.6 <=2.2.0) +624 more potentially affected by CVE-2025-7783 via form-data (>=3.0.0 <=3.0.3)

form-data NPM version =3.0.0, =1.17.6-next.0, =1.0.6, =1.0.0, =0.12.4, =1.1.3, =1.9.19, =1.1.0, =1.18.0, =2.13.1, =1.1.0, =10.1.0, =1.0.0, =1.9.2, =2.1.4 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

9.4CVSS6.4AI score0.01735EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2025/07/21 7:4 p.m.52 views

form-data uses unsafe random function in form-data for choosing boundary

Summary form-data uses Math.random to select a boundary value for multipart form-encoded data. This can lead to a security issue if an attacker: 1. can observe other values produced by Math.random in the target application, and 2. can control one field of a request made using form-data Because th...

9.4CVSS7.1AI score0.01735EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2025/07/21 7:4 p.m.7 views

GHSA-FJXV-7RQG-78G4 form-data uses unsafe random function in form-data for choosing boundary

Summary form-data uses Math.random to select a boundary value for multipart form-encoded data. This can lead to a security issue if an attacker: 1. can observe other values produced by Math.random in the target application, and 2. can control one field of a request made using form-data Because th...

9.4CVSS6AI score0.01735EPSS
SaveExploits1References6
vulnersOsv
vulnersOsv
added 2025/07/21 7:4 p.m.8 views

10secondsofcode-custom (=1.0.0), 1kohei1 (>=1.0.0 <=1.0.1) +4155 more potentially affected by CVE-2025-7783 via form-data (>=4.0.0 <=4.0.3)

form-data NPM version =4.0.0, =1.0.0, =1.2.0, =1.0.0, =0.1.0, =0.0.1, =5.0.0, =0.0.1, =1.0.1, =1.0.32, =1.0.32, =1.1.11 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

9.4CVSS6.4AI score0.01735EPSS
SaveExploits1
NVD
NVD
added 2025/07/18 5:15 p.m.33 views

CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS0.01735EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/18 5:15 p.m.7 views

DEBIAN-CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.1AI score0.01735EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/18 5:15 p.m.9 views

AZL-65610 CVE-2025-7783 affecting package js-jquery 3.5.0-4

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.7AI score0.01735EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/18 5:15 p.m.9 views

AZL-65606 CVE-2025-7783 affecting package js-jquery 3.5.0-4

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.7AI score0.01735EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/18 5:15 p.m.5 views

UBUNTU-CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 -...

9.4CVSS6.7AI score0.01735EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2025/07/18 4:56 p.m.536 views

Exploit for CVE-2025-7783

form-data boundary randomness vulnerability CVE-2025-7783 L...

9.4CVSS6.6AI score0.01735EPSS
SaveExploits1
Snyk
Snyk
added 2025/07/18 4:43 p.m.6 views

Predictable Value Range from Previous Values

Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...

9.4CVSS7AI score0.01735EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/07/18 4:43 p.m.2 views

Predictable Value Range from Previous Values

Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...

9.4CVSS7AI score0.01735EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/07/18 4:34 p.m.88 views

CVE-2025-7783 Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS0.01735EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/07/18 4:34 p.m.13 views

CVE-2025-7783 Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.2AI score0.01735EPSS
SaveExploits1References2
CVE
CVE
added 2025/07/18 4:34 p.m.275 views

CVE-2025-7783

CVE-2025-7783 affects node-form-data; vulnerable versions include

9.4CVSS6.6AI score0.01735EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2025/07/18 4:34 p.m.7 views

CVE-2025-7783

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.1AI score0.01735EPSS
SaveExploits1
OSV
OSV
added 2025/07/18 4:34 p.m.8 views

CVE-2025-7783 Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. This issue affects form-data: 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3...

9.4CVSS6.5AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/07/18 12:0 a.m.9 views

PT-2025-30061

Name of the Vulnerable Software and Affected Versions form-data versions 2.5.4 form-data versions 3.0.0 through 3.0.3 form-data versions 4.0.0 through 4.0.3 Description A vulnerability exists in the form-data JavaScript library due to the use of insufficiently random values when generating bounda...

9.4CVSS6.6AI score0.01735EPSS
SaveExploits1References124
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.4 views

form-data 安全漏洞

Form-Data is a FormData open source module for creating readable form data streams. It can be used for form submissions and file uploads to other web applications. A security vulnerability exists in form-data versions prior to 2.5.4, 3.0.0 through 3.0.3, and 4.0.0 through 4.0.3, which stems from ...

9.4CVSS5.6AI score0.01735EPSS
SaveExploits1References2
Rows per page
Query Builder