Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sideralis Subscribe
Filtered by product Valib.js
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10805 1 Sideralis 1 Valib.js 2020-03-05 5.0 MEDIUM 7.5 HIGH
valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is possible for a crafted payload to overwrite this function to manipulate the inspection results to bypass security checks.