Read the docs

Backbone-query-parameters Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Backbone-query-parameters Project records in CISA KEV

No Backbone-query-parameters Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Backbone-query-parameters 1 record MEDIUM

Records

1 record in Backbone-query-parameters · all components

TI-2021-03388 CVE-2021-20085 · GHSA-8qpm-5c82-rf96

Prototype pollution in backbone-query-parameters

Priority MEDIUM 41

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01606 Published 2021-04-23 No fix listed CWE-1321
Open these records in search →