A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle()`, `parse()`, `resolve()`, `dereference() functions.
References
Configurations
No configuration.
History
20 Aug 2024, 14:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1321 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
Summary |
|
20 May 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-20 18:15
Updated : 2024-08-20 14:35
NVD link : CVE-2024-29651
Mitre link : CVE-2024-29651
CVE.ORG link : CVE-2024-29651
JSON object : View
Products Affected
No product.
CWE
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')