Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:18 a.m.•14 views

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

9.8CVSS7.5AI score0.00622EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/17 4:15 p.m.•28 views

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

9.8CVSS0.00622EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/17 12:00 a.m.•16 views

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

7.8AI score0.00622EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/17 12:00 a.m.•13 views

npm getsetprop Security Vulnerabilities

npm getsetprop is a library from the American company npm. A security vulnerability exists in npm getsetprop version 1.1.0, which originated from allowing an attacker to execute arbitrary code via global.accessor...

9.8CVSS7.7AI score0.00622EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/17 12:00 a.m.•56 views

CVE-2024-36575

The getsetprop library (version 1.1.0 ) is vulnerable to a Prototype Pollution issue. The root cause is improper restrictions on __proto__ or constructor.prototype properties. This flaw allows an attacker to manipulate application logic, which can lead to denial of service or remote code executio...

9.8CVSS7.8AI score0.00622EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/17 12:00 a.m.•17 views

PT-2024-27075 · Unknown · Getsetprop

Name of the Vulnerable Software and Affected Versions: getsetprop version 1.1.0 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via global.accessor. Recommendations: For getsetprop version 1.1.0, consider disabling access to the global.accessor until a patch ...

9.8CVSS8.2AI score0.00622EPSS
SaveExploits0References3
Rows per page
Query Builder