critical9.8
CVE-2022-22912
Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.
Impact
Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plist Project | Plist | before 3.0.6 |