ronmadar/Open-Source-Seal-Security

PoC

Fix open source package uses tough-cookie 2.5.0 - CVE-2023-26136,

view exploit source poc_in_githubauthor ronmadarpublished 2024-05-06catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-26136US	critical9.8	2.63% (85th)	Exploit	2023-07-01
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.