exploitDog

CVE-2026-55810

Опубликовано: 10 июл. 2026

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

Ссылки

https://www.drupal.org/sa-contrib-2026-050
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:plotly:plotly.js_graphing:*:*:*:*:*:drupal:*:*

Версия до 3.0.2 (исключая)

EPSS

Процентиль: 16%

0.00248

Низкий

8.1 High

CVSS3

Дефекты

CWE-915

Связанные уязвимости

CVE-2026-55810

CVSS3: 8.1

redhat

25 дней назад

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

GHSA-gr6q-5p85-fq4q

CVSS3: 9.8

github

25 дней назад

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

EPSS

Процентиль: 16%

0.00248

Низкий

8.1 High

CVSS3

Дефекты

CWE-915