exploitDog

CVE-2026-23929

Опубликовано: 18 авг. 2026

Источник: nvd

EPSS Низкий

Описание

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain.

Ссылки

https://support.zabbix.com/browse/ZBX-28068

EPSS

Процентиль: 22%

0.00296

Низкий

Дефекты

CWE-1321

Связанные уязвимости

CVE-2026-23929

ubuntu

2 дня назад

(Prototype pollution vulnerability in searchParamsToObject() is leading ...)

CVE-2026-23929

debian

2 дня назад

Prototype pollution vulnerability in searchParamsToObject() is leading ...

GHSA-x27p-fpr7-4wpm

github

2 дня назад

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.

EPSS

Процентиль: 22%

0.00296

Низкий

Дефекты

CWE-1321