Lucene search
K

6 matches found

OSV
OSV
added 2022/06/17 8:15 p.m.0 views

CVE-2022-21213

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

7.5CVSS7.1AI score
Exploits0References5
Prion
Prion
added 2022/06/17 8:15 p.m.8 views

Design/Logic Flaw

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

5CVSS7.5AI score0.01862EPSS
Exploits2References5
Cvelist
Cvelist
added 2022/06/17 8:5 p.m.17 views

CVE-2022-21213 Prototype Pollution

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

7.5CVSS7.8AI score0.01862EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2022/06/17 8:0 p.m.2 views

CVE-2022-21213

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

7.5CVSS7.1AI score0.01862EPSS
Exploits2References6
Veracode
Veracode
added 2020/12/14 6:8 a.m.15 views

Prototype Pollution

mout is vulnerable to prototype pollution. An attacker is able to fill missing properties recursively via deepFillIn and mixes objects into the target existing child objects object recursively using deepMixIn as those functions do not validate the key to access the target object recursively...

7.5CVSS5.6AI score0.00982EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2018/06/19 12:0 a.m.2 views

ISC BIND Sensitive Information Disclosure Vulnerability

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. BIND suffers from a sensitive information disclosure vulnerability due to a flaw in BIND's recursive access control, which could be exploited by an...

7.5CVSS5.8AI score0.03303EPSS
Exploits0References1
Rows per page
Query Builder