Yüksek CVSS 7.5
CVE-2025-57317: Apidoc-core: denetimsiz kaynak tüketimi
Açıklama (NVD)
apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
Özet bilgiler
- Ürün
- Apidocjs Apidoc-core
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,36 (yüzdelik 29)
- CWE
- CWE-400
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apidocjs-apidoc-core | — | 0.15.0 | — |