EUVD-2022-0644

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-23450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. CVE-2021-23450 Note that Nessus relies on the presence of the...

HTTP Response Splitting

netty-codec-http is vulnerable to HTTP response splitting attack. The vulnerability exists in the setObject function of DefaultHeaders.java as it takes the arrays and iterators as arguments, providing a way to bypass value validation allowing an attacker to inject malicious header values into the...

Prototype Pollution in dojo

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

DEBIAN-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

UBUNTU-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450 Prototype Pollution

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

CVE-2021-23450 describes a Prototype Pollution vulnerability in the Dojo package, exposed via the setObject function. Multiple connected advisories confirm Dojo is affected and note remediation by upgrading to fixed Dojo versions in vendor advisories (IBM, other vendors) and related security bull...

dojo 安全漏洞

dojo is a JavaScript toolkit that contains utilities, UI components, and more. A security vulnerability exists in dojo that stems from the software's susceptibility to Prototype contamination via the setObject function...

PT-2021-7298 · Dojo +3 · Dojo +3

Name of the Vulnerable Software and Affected Versions: dojo versions all Description: The issue is related to the incorrect management of code generation in the dojo library's setObject function. This can allow a remote attacker to execute arbitrary code. The vulnerability is associated with...