Read the docs

mootools

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

mootools records in CISA KEV

No mootools vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

Priority HIGH 66

MooTools is a collection of JavaScript utilities for JavaScript developers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00675 Published 2023-01-03 No fix listed CWE-400
TI-2021-03391 CVE-2021-20088 · GHSA-fw45-938v-p26j

Prototype pollution in mootools-more

Priority MEDIUM 41

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01449 Published 2021-04-23 No fix listed CWE-1321
Open these records in search →