Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2021/04/13 3:24 p.m.43 views

Prototype pollution in set-object-value

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.1AI score0.04322EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/04/13 3:24 p.m.13 views

GHSA-4JJ4-M52P-8RX3 Prototype pollution in set-object-value

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.04322EPSS
Exploits1References3
Huntr
Huntr
added 2021/01/10 12:0 a.m.20 views

Prototype Pollution in react-atomic/react-atomic-organism

Description set-object-value is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: // poc.js var setObjectValue = require"set-object-value" var obj = console.log"Before : " + .polluted; setObjectValueobj, 'proto','polluted', 'Yes! Its Polluted'; console.log"Afte...

7.5CVSS2.2AI score0.04322EPSS
Exploits1
Veracode
Veracode
added 2020/12/30 1:47 a.m.15 views

Prototype Pollution

set-object-value is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype causing a denial of service and may lead to remote code executio...

9.8CVSS5.3AI score0.04322EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2020/12/29 6:15 p.m.6 views

CVE-2020-28281

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.04322EPSS
Exploits1References2
OSV
OSV
added 2020/12/29 6:15 p.m.2 views

CVE-2020-28281

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.6AI score0.04322EPSS
Exploits1References2
Prion
Prion
added 2020/12/29 6:15 p.m.11 views

Remote code execution

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS9.5AI score0.04322EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2020/12/29 5:5 p.m.45 views

CVE-2020-28281

CVE-2020-28281 affects the npm package set-object-value (versions 0.0.0–0.0.5). The underlying issue is prototype pollution in set-object-value, enabling an attacker to perform DoS and potentially remote code execution by manipulating object prototypes. Connected advisories confirm this prototype...

9.8CVSS9.5AI score0.04322EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.1 views

React Atomic Organism Security Vulnerability

React Atomic Organism is a codebase from the React Atomic team used to provide atomicity support for React applications. A security vulnerability in React Atomic Organism set-object-value versions 0.0.0 through 0.0.5 allows attackers to exploit the vulnerability for denial of service and...

9.8CVSS6.1AI score0.04322EPSS
Exploits1References3
Rows per page
Query Builder