Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2025/02/05 9:30 p.m.25 views

Plenti - Code Injection - Denial of Services

Summary While pushing a file via postLocal method if user add javascript code in file parameter that codes can exe in v8go context. Details While posting a file via postLocal, any attacker will add javascript codes to file parameter. That parameter content pass to componentSignature method after...

8.8CVSS7.7AI score0.00696EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2025/02/05 9:30 p.m.20 views

GHSA-MJ4V-HP69-27X5 Plenti - Code Injection - Denial of Services

Summary While pushing a file via postLocal method if user add javascript code in file parameter that codes can exe in v8go context. Details While posting a file via postLocal, any attacker will add javascript codes to file parameter. That parameter content pass to componentSignature method after...

6.5CVSS9AI score0.00696EPSS
SaveExploits1References9
Rows per page
Query Builder