Lucene search
+L

115 matches found

Cvelist
Cvelist
•added 2022/02/04 8:05 p.m.•51 views

CVE-2021-23507 Prototype Pollution

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...

7.5CVSS9.7AI score0.02125EPSS
SaveExploits1References4
CVE
CVE
•added 2022/02/04 8:05 p.m.•97 views

CVE-2021-23507

CVE-2021-23507 affects the npm package object-path-set . Versions before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, enabling an attacker to merge properties into object prototypes. Impact can include denial of service or potential remote code execution, per the provided r...

9.8CVSS8.6AI score0.02125EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2022/02/04 8:00 p.m.•9 views

CVE-2021-23507

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...

9.8CVSS7.2AI score0.02125EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/02/04 12:00 a.m.•3 views

PT-2022-9404

Name of the Vulnerable Software and Affected Versions object-path-set versions prior to 1.0.2 Description The issue allows an attacker to merge object prototypes into it via the setPath method, enabling Prototype Pollution. This vulnerability is a result of an incomplete fix. Recommendations For...

9.8CVSS0.02125EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2022/02/04 12:00 a.m.•18 views

object-path 安全漏洞

object-path is a personal developer's Npm library for accessing variables in data structures via paths. A security vulnerability exists in object-path-set prior to version 1.0.2, which stems from software that is vulnerable to Prototype Pollution via the setPath method, allowing an attacker to...

9.8CVSS8.3AI score0.02125EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•8 views

CVE-2021-23507: Improperly Controlled Modification of Object Prototype Attributes

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...

9.8CVSS8.2AI score0.02125EPSS
SaveExploits1References2
Snyk
Snyk
•added 2022/01/30 10:37 a.m.•21 views

Prototype Pollution

Overview object-path-set is a set values in javascript objects by specifying a path Affected versions of this package are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix ...

9.8CVSS9AI score0.02125EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2021/10/14 10:38 p.m.•85 views

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.9 security, bug, and container updates

Red Hat Advanced Cluster Management for Kubernetes 2.2.9 General Availability release images, which provide security updates, one or more container updates, and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syste...

9.8CVSS6.5AI score0.53461EPSS
SaveExploits14References11
vulnersOsv
vulnersOsv
•added 2021/09/20 8:46 p.m.•23 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +6850 more potentially affected by CVE-2021-3805 via object-path (>=0.0.1, <=0.11.7)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.99 and more Source cves: CVE-2021-3805 Source advisory: OSV:GHSA-8V63-CQQC-6R2C...

7.5CVSS7.3AI score0.0204EPSS
SaveExploits1
OSV
OSV
•added 2021/09/20 8:46 p.m.•8 views

GHSA-8V63-CQQC-6R2C Prototype Pollution in object-path

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'. The del function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like...

7.5CVSS7.1AI score0.0204EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2021/09/20 8:46 p.m.•54 views

Prototype Pollution in object-path

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'. The del function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like...

7.5CVSS7.9AI score0.0204EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2021/09/17 6:15 a.m.•2 views

DEBIAN-CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS7AI score0.0204EPSS
SaveExploits1References1
NVD
NVD
•added 2021/09/17 6:15 a.m.•33 views

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS0.0204EPSS
SaveExploits1References3
OSV
OSV
•added 2021/09/17 6:15 a.m.•30 views

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS6.6AI score
SaveExploits0References3
OSV
OSV
•added 2021/09/17 6:15 a.m.•10 views

UBUNTU-CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS7.1AI score0.0204EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2021/09/17 6:15 a.m.•33 views

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS7.1AI score0.0204EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/09/17 6:15 a.m.•12 views

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS7.1AI score0.0204EPSS
SaveExploits1References4
Mend
Mend
•added 2021/09/17 12:00 a.m.•1 views

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

8.7CVSS0.0204EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/17 12:00 a.m.•5 views

CVE-2021-3805: Improperly Controlled Modification of Object Prototype Attributes

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS5.8AI score0.0204EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/09/17 12:00 a.m.•51 views

CVE-2021-3805 Prototype Pollution in mariocasciaro/object-path

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS8.1AI score0.0204EPSS
SaveExploits1References3
Rows per page
Query Builder