Prototype Pollution

🗓️ 11 Nov 2019 05:35:56Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 8 Views

pomelo vulnerability in template/game-server/app/servers/connector/handler/entryHandler.j

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2019-18954	14 Nov 201900:15	–	cve
OSV	Pomelo allows external control of critical state data	2 Dec 201918:16	–	osv
OSV	CVE-2019-18954	14 Nov 201900:15	–	osv
GithubExploit	Exploit for Exposure of Resource to Wrong Sphere in Netease Pomelo	1 Dec 202009:18	–	githubexploit
NVD	CVE-2019-18954	14 Nov 201900:15	–	nvd
Github Security Blog	Pomelo allows external control of critical state data	2 Dec 201918:16	–	github
Prion	Xxe	14 Nov 201900:15	–	prion
Cvelist	CVE-2019-18954	13 Nov 201923:39	–	cvelist

Vulners

Node

pomeloRange≤2.2.7

Source	Link
github	www.github.com/NetEase/pomelo/issues/1149
github	www.github.com/cl0udz/vulnerabilities/tree/master/pomelo-critical-state-manipulation
github	www.github.com/NetEase/pomelo/pull/1150

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Nov 2019 05:56Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00098