Lucene search
+L

3 matches found

Veracode
Veracode
•added 2024/08/01 8:59 a.m.•31 views

Prototype Pollution

@allpro/form-manager is vulnerable to Prototype Pollution. The vulnerability is due to inadequate validation and protection in the setDefaults, mergeBranch, and Object.setObjectValue methods, which allows attackers to manipulate Object.prototype and potentially escalate to Denial of Service, remo...

9.8CVSS5.8AI score0.00651EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder