Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2020/11/27 2:51 p.m.•44 views

CVE-2020-15256

A flaw was found in object-path. A prototype pollution vulnerability has been found in object-path affecting the set method. The vulnerability is limited to the includeInheritedProps mode if version = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and...

9.8CVSS2AI score0.01546EPSS
SaveExploits0References3
Veracode
Veracode
•added 2020/10/20 1:39 a.m.•38 views

Prototype Pollution

object-path is vulnerable to prototype pollution. The vulnerability exists as the set method does not restrict the proto header value to be set. The vulnerability is limited to the includeInheritedProps mode, and setting the option includeInheritedProps: true, or by using the default...

9.8CVSS1.6AI score0.01546EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2020/10/19 10:15 p.m.•46 views

CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS9AI score
SaveExploits0References2
Prion
Prion
•added 2020/10/19 10:15 p.m.•38 views

Design/Logic Flaw

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

6.8CVSS8.6AI score0.01546EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/10/19 9:25 p.m.•217 views

CVE-2020-15256

The CVE-2020-15256 issue concerns the Node.js object-path library where prototype pollution can occur in set() when includeInheritedProps is enabled or using the withInheritedProps instance. Affected versions are

9.8CVSS6.8AI score0.01546EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2020/10/19 9:25 p.m.•49 views

CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS7.3AI score0.01546EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/10/19 9:25 p.m.•51 views

CVE-2020-15256 Prototype pollution in object-path

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

7.7CVSS6.8AI score0.01546EPSS
SaveExploits0References2
nodejs
nodejs
•added 2020/10/19 9:18 p.m.•64 views

Prototype Pollution

Overview A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating...

6.8CVSS2.2AI score0.01546EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2020/10/19 8:55 p.m.•66 views

Prototype pollution in object-path

Impact A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mo...

9.8CVSS3.4AI score0.01546EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/19 12:00 a.m.•3 views

CVE-2020-15256: Modification of Assumed-Immutable Data (MAID)

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS7.8AI score0.01546EPSS
SaveExploits0References3
Rows per page
Query Builder