Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x27p-fpr7-4wpm

Опубликовано: 18 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 5.4

Описание

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain.

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain.

EPSS

Процентиль: 18%
0.00258
Низкий

8.5 High

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-1321

Связанные уязвимости

CVSS3: 5.4
ubuntu
3 месяца назад

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.

CVSS3: 7.3
redhat
3 месяца назад

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.

CVSS3: 5.4
nvd
3 месяца назад

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.

CVSS3: 5.4
debian
3 месяца назад

Prototype pollution vulnerability in searchParamsToObject() is leading ...

CVSS3: 7.5
altlinux
2 месяца назад

ALT-PU-2026-14143: package `zabbix` update to version 7.0.30-alt0.p10.1

EPSS

Процентиль: 18%
0.00258
Низкий

8.5 High

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-1321