Lucene search
+L

4 matches found

nodejs
nodejs
added 2021/02/25 5:07 p.m.57 views

Prototype Override

Overview Affected versions of querystringify are vulnerable to Prototype Override. If a malicious string is inserted in the query string, it will set the tostring method of the object to the true boolean. Recommendation Upgrade to version 2.0.0 or later References - WhiteSource Advisory - Snyk...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2019/09/02 2:00 a.m.13 views

Prototype Pollution

querystringify is vulnerable to prototype pollution. Lack of validation allows an attacker to submit a query string that overrides the toString or proto function. This could potentially allow the attacker to execute arbitrary code...

5.4AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2019/06/07 9:12 p.m.30 views

Prototype Pollution in querystringify

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...

7AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/06/07 9:12 p.m.27 views

GHSA-HXCM-V35H-MG2X Prototype Pollution in querystringify

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...

7AI score
SaveExploits0References2
Rows per page
Query Builder