Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2021/04/13 3:24 p.m.•67 views

Prototype pollution in set-object-value

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.1AI score0.03747EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/04/13 3:24 p.m.•104 views

GHSA-4JJ4-M52P-8RX3 Prototype pollution in set-object-value

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.03747EPSS
SaveExploits1References3
Huntr
Huntr
•added 2021/01/10 12:00 a.m.•98 views

Prototype Pollution in react-atomic/react-atomic-organism

Description set-object-value is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: // poc.js var setObjectValue = require"set-object-value" var obj = console.log"Before : " + .polluted; setObjectValueobj, 'proto','polluted', 'Yes! Its Polluted'; console.log"Afte...

7.5CVSS2.2AI score0.03747EPSS
SaveExploits1
Veracode
Veracode
•added 2020/12/30 1:47 a.m.•28 views

Prototype Pollution

set-object-value is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype causing a denial of service and may lead to remote code executio...

9.8CVSS5.3AI score0.03747EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2020/12/29 6:15 p.m.•52 views

CVE-2020-28281

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.03747EPSS
SaveExploits1References2
OSV
OSV
•added 2020/12/29 6:15 p.m.•34 views

CVE-2020-28281

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.6AI score0.03747EPSS
SaveExploits1References2
Prion
Prion
•added 2020/12/29 6:15 p.m.•25 views

Remote code execution

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS9.5AI score0.03747EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2020/12/29 5:05 p.m.•74 views

CVE-2020-28281

CVE-2020-28281 affects the npm package set-object-value (versions 0.0.0–0.0.5). The underlying issue is prototype pollution in set-object-value, enabling an attacker to perform DoS and potentially remote code execution by manipulating object prototypes. Connected advisories confirm this prototype...

9.8CVSS9.5AI score0.03747EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2020/12/29 12:00 a.m.•16 views

React Atomic Organism Security Vulnerability

React Atomic Organism is a codebase from the React Atomic team used to provide atomicity support for React applications. A security vulnerability in React Atomic Organism set-object-value versions 0.0.0 through 0.0.5 allows attackers to exploit the vulnerability for denial of service and...

9.8CVSS6.1AI score0.03747EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/29 12:00 a.m.•0 views

CVE-2020-28281: Undefined Security Weakness

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS6.1AI score0.03747EPSS
SaveExploits1References1
Rows per page
Query Builder