extend project records
1 published records for vendor extend project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
1 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2018-16492Proof of concept | A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Oextend project · extend · CWE-400 | Critical9.8 | — | 3.0% | Feb 1, 2019 |
- CVE-2018-1649240Plan
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto O
CriticalCVSS 9.8Proof of conceptEPSS 3%extend project · extendFeb 1, 2019