m-lito13/SealSecurity_Exam

PoC

Fix prototype pollution vulnerability (CVE-2023-26136) for tough-cookie package

view exploit source poc_in_githubauthor m-lito13published 2024-09-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-26136US	critical9.8	2.63% (85th)	Exploit	2023-07-01
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.