Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26mh-xhv7-944g

Опубликовано: 30 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

EPSS

Процентиль: 58%
0.00973
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-1321

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

EPSS

Процентиль: 58%
0.00973
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-1321