Vulnerabilities > CVE-2022-26260 - Unspecified vulnerability in Simple-Plist Project Simple-Plist 1.3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
simple-plist-project

Summary

Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().

Vulnerable Configurations

Part Description Count
Application
Simple-Plist_Project
1