5 matches found
Prototype Pollution
@allpro/form-manager is vulnerable to Prototype Pollution. The vulnerability is due to inadequate validation and protection in the setDefaults, mergeBranch, and Object.setObjectValue methods, which allows attackers to manipulate Object.prototype and potentially escalate to Denial of Service, remo...
9.8CVSS7AI score0.00651EPSS
SaveExploits1References3Affected Software1
20