TI-2022-13150 CVE-2022-31106
Prototype Pollution in underscore.deep
Priority HIGH 81
Underscore.deep is a collection of Underscore mixins that operate on nested objects.
Clever
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Clever records in CISA KEVNo Clever vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2017-08454 CVE-2017-11429 · GHSA-5p5w-j3g7-w4wv
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
Priority MEDIUM 47
Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptogra…