Lucene search
+L

1 matches found

Huntr
Huntr
added 2020/10/12 12:0 a.m.18 views

Prototype Pollution in sagold/gson-query

Description gson-query is vulnerable to Prototype Pollution. This package allowing for modification of prototype behavior, which may result in Information Disclosure/DoS/RCE. Proof of Concept 1. Create the following PoC file: js // poc.js var gsonQuery = require"gson-query" var obj =...

1.9AI score
SaveExploits0
Rows per page
Query Builder