Vendors / Backbone-query-parameters Project Backbone-query-parameters Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Backbone-query-parameters Project records in CISA KEV No Backbone-query-parameters Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01606 · Published 2021-04-23 · No fix listed CWE-1321
Open these records in search → All records by CVSS severity
0 1 0 0 0
