Lucene search
+L

31 matches found

Snyk
Snyk
added 2025/01/28 11:42 p.m.3 views

Prototype Pollution

Overview org.webjars.npm:redoc is an OpenAPI/Swagger-generated API Reference Documentation. Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects method in utils/helpers.ts due to improper user input sanitization. PoC js async = const lib = await...

7.5CVSS8.1AI score0.00515EPSS
Exploits1References2
NVD
NVD
added 2024/07/30 8:15 p.m.18 views

CVE-2024-39011

Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...

9.8CVSS0.00912EPSS
Exploits1References1
OSV
OSV
added 2024/07/30 8:15 p.m.4 views

CVE-2024-39011

Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...

9.8CVSS6AI score0.00912EPSS
Exploits1References1
CVE
CVE
added 2024/07/30 12:0 a.m.60 views

CVE-2024-39011

CVE-2024-39011 : Multiple sources identify a prototype pollution vulnerability in the ChargeOver Redoc package, version 2.0.9-rc.69 , exploitable via the function mergeObjects . Public descriptions attribute potential for arbitrary code execution and Denial of Service (DoS) , with impacts on conf...

9.8CVSS7.9AI score0.00912EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/07/30 12:0 a.m.26 views

CVE-2024-39011

Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...

0.00912EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/07/30 12:0 a.m.18 views

CVE-2024-39011

Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...

7.9AI score0.00912EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/07/30 12:0 a.m.5 views

PT-2024-28321

Name of the Vulnerable Software and Affected Versions chargeover redoc version 2.0.9-rc.69 Description The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS and have other impacts via the mergeObjects function. Recommendations For chargeover redoc version...

9.8CVSS6AI score0.00912EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.6 views

Redoc 安全漏洞

Redoc is an open source tool from Redocly Open Source. It is used to generate documentation from OpenAPI definitions. A security vulnerability exists in Redoc version v2.0.9-rc.69. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service denial of servic...

9.8CVSS7.5AI score0.00912EPSS
Exploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:25 p.m.3 views

Malicious code in Be.Vlaandеren.Basisregisters.AspNetCore.Swaggеr.ReDoc (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2024/06/25 1:25 p.m.6 views

MAL-2024-4163 Malicious code in Be.Vlaandеren.Basisregisters.AspNetCore.Swaggеr.ReDoc (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.4 views

Malicious code in Be.Vlaaոdеren.Bаsisregisters.AspNetCore.Swaggеr.ReDoc (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Rows per page
Query Builder