Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2024/07/01 3:32 p.m.•30 views

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS9AI score0.00822EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2024/07/01 12:00 a.m.•13 views

patch-into security holes

patch-into is a library by akbr individual developers. A security vulnerability exists in patch-into version v1.0.1, which originates from the inclusion of prototype contamination via the function patchInto, which allows attackers to execute arbitrary code or cause a denial of service DoS by...

8.8CVSS7.7AI score0.00822EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•3 views

PT-2024-28307

Name of the Vulnerable Software and Affected Versions akbr patch-into version 1.0.1 Description The issue is related to a prototype pollution via the function patchInto. This allows attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary properties...

8.8CVSS0.00822EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•3 views

CVE-2024-38991: Improperly Controlled Modification of Object Prototype Attributes

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS6.5AI score0.00822EPSS
SaveExploits0References1
Mend
Mend
•added 2024/07/01 12:00 a.m.•2 views

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS0.00822EPSS
SaveExploits0References3
Rows per page
Query Builder