Описание
Redoc Prototype Pollution via Module.mergeObjects Component
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
Пакеты
Наименование
redoc
npm
Затронутые версииВерсия исправления
< 2.4.0
2.4.0
Связанные уязвимости
CVSS3: 7.5
redhat
9 месяцев назад
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
CVSS3: 7.5
nvd
9 месяцев назад
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.