24 matches found
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
CVE-2024-39012
ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
Prototype Pollution
Overview org.webjars.npm:redoc is an OpenAPI/Swagger-generated API Reference Documentation. Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects method in utils/helpers.ts due to improper user input sanitization. PoC js async = const lib = await...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
CVE-2024-39012
ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39012
ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
Redoc security vulnerabilities
Redoc is an open source tool from Redocly Open Source. It is used to generate documentation from OpenAPI definitions. A security vulnerability exists in Redoc version v2.0.9-rc.69. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service denial of servic...
CVE-2024-39012
ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39011
CVE-2024-39011 : Multiple sources identify a prototype pollution vulnerability in the ChargeOver Redoc package, version 2.0.9-rc.69 , exploitable via the function mergeObjects . Public descriptions attribute potential for arbitrary code execution and Denial of Service (DoS) , with impacts on conf...
ais-ltd strategyen security vulnerabilities
ais-ltd strategyen is a UK AIS application. A security vulnerability exists in ais-ltd strategyen version v0.4.0, which stems from the discovery of inclusion prototype contamination via the mergeObjects function. An attacker could exploit this vulnerability to execute arbitrary code or cause a...
CVE-2024-39012: Improperly Controlled Modification of Object Prototype Attributes
ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39011: Improperly Controlled Modification of Object Prototype Attributes
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
PT-2024-28322 · Ais · Ais-Ltd Strategyen
Name of the Vulnerable Software and Affected Versions: ais-ltd strategyen version 0.4.0 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties using the mergeObjects function. This is a result of prototype pollution...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
PT-2024-28321
Name of the Vulnerable Software and Affected Versions chargeover redoc version 2.0.9-rc.69 Description The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS and have other impacts via the mergeObjects function. Recommendations For chargeover redoc version...
WS-2021-0385
In tangram NPM module, versions v0.1.0 through v0.21.1 are vulnerable to Prototype Pollution vulnerability since the function mergeObjects does not check for the type of object before assigning value to the property. Due to this flaw an attacker could create a non-existent property or be able to...
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs
Overview casperjs is a navigation scripting & testing utility for PhantomJS and SlimerJS. Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects utility function. PoC js var payload = JSON.parse'"proto": "a": "pwned"'; mergeObjects, payload; console.log.a; //...
Prototype Pollution
casperjs is vulnerable to prototype pollution. The mergeObjects function in utils.js does not validate object types and allows an attacker to inject arbitrary properties to overwrite proto or constructor attributes...
CasperJS Input Validation Error Vulnerability
CasperJS is a navigation script and test utility for the PhantomJS and SlimerJS browsers. An input validation error vulnerability exists in the 'mergeObjects' function in all versions of CasperJS. An attacker can exploit this vulnerability to execute arbitrary code...
