CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.052

EPSS Ranking 89.4%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2023-26136

Salesforce » Tough-Cookie » Version: 0.10.0

cpe:2.3:a:salesforce:tough-cookie:0.10.0
Salesforce » Tough-Cookie » Version: 0.11.0

cpe:2.3:a:salesforce:tough-cookie:0.11.0
Salesforce » Tough-Cookie » Version: 0.12.0

cpe:2.3:a:salesforce:tough-cookie:0.12.0
Salesforce » Tough-Cookie » Version: 0.12.1

cpe:2.3:a:salesforce:tough-cookie:0.12.1
Salesforce » Tough-Cookie » Version: 0.13.0

cpe:2.3:a:salesforce:tough-cookie:0.13.0
Salesforce » Tough-Cookie » Version: 0.9.0

cpe:2.3:a:salesforce:tough-cookie:0.9.0
Salesforce » Tough-Cookie » Version: 0.9.1

cpe:2.3:a:salesforce:tough-cookie:0.9.1
Salesforce » Tough-Cookie » Version: 0.9.11

cpe:2.3:a:salesforce:tough-cookie:0.9.11
Salesforce » Tough-Cookie » Version: 0.9.12

cpe:2.3:a:salesforce:tough-cookie:0.9.12
Salesforce » Tough-Cookie » Version: 0.9.13

cpe:2.3:a:salesforce:tough-cookie:0.9.13
Salesforce » Tough-Cookie » Version: 0.9.14

cpe:2.3:a:salesforce:tough-cookie:0.9.14
Salesforce » Tough-Cookie » Version: 0.9.15

cpe:2.3:a:salesforce:tough-cookie:0.9.15
Salesforce » Tough-Cookie » Version: 0.9.3

cpe:2.3:a:salesforce:tough-cookie:0.9.3
Salesforce » Tough-Cookie » Version: 0.9.4

cpe:2.3:a:salesforce:tough-cookie:0.9.4
Salesforce » Tough-Cookie » Version: 0.9.5

cpe:2.3:a:salesforce:tough-cookie:0.9.5
Salesforce » Tough-Cookie » Version: 0.9.6

cpe:2.3:a:salesforce:tough-cookie:0.9.6
Salesforce » Tough-Cookie » Version: 0.9.7

cpe:2.3:a:salesforce:tough-cookie:0.9.7
Salesforce » Tough-Cookie » Version: 0.9.8

cpe:2.3:a:salesforce:tough-cookie:0.9.8
Salesforce » Tough-Cookie » Version: 0.9.9

cpe:2.3:a:salesforce:tough-cookie:0.9.9
Salesforce » Tough-Cookie » Version: 1.0.0

cpe:2.3:a:salesforce:tough-cookie:1.0.0
Salesforce » Tough-Cookie » Version: 1.1.0

cpe:2.3:a:salesforce:tough-cookie:1.1.0
Salesforce » Tough-Cookie » Version: 1.2.0

cpe:2.3:a:salesforce:tough-cookie:1.2.0
Salesforce » Tough-Cookie » Version: 2.0.0

cpe:2.3:a:salesforce:tough-cookie:2.0.0
Salesforce » Tough-Cookie » Version: 2.1.0

cpe:2.3:a:salesforce:tough-cookie:2.1.0
Salesforce » Tough-Cookie » Version: 2.2.0

cpe:2.3:a:salesforce:tough-cookie:2.2.0
Salesforce » Tough-Cookie » Version: 2.2.1

cpe:2.3:a:salesforce:tough-cookie:2.2.1
Salesforce » Tough-Cookie » Version: 2.2.2

cpe:2.3:a:salesforce:tough-cookie:2.2.2
Salesforce » Tough-Cookie » Version: 2.3.0

cpe:2.3:a:salesforce:tough-cookie:2.3.0
Salesforce » Tough-Cookie » Version: 2.3.1

cpe:2.3:a:salesforce:tough-cookie:2.3.1
Salesforce » Tough-Cookie » Version: 2.3.2

cpe:2.3:a:salesforce:tough-cookie:2.3.2
Salesforce » Tough-Cookie » Version: 2.3.3

cpe:2.3:a:salesforce:tough-cookie:2.3.3
Salesforce » Tough-Cookie » Version: 2.3.4

cpe:2.3:a:salesforce:tough-cookie:2.3.4
Salesforce » Tough-Cookie » Version: 2.4.2

cpe:2.3:a:salesforce:tough-cookie:2.4.2
Salesforce » Tough-Cookie » Version: 2.4.3

cpe:2.3:a:salesforce:tough-cookie:2.4.3
Salesforce » Tough-Cookie » Version: 2.5.0

cpe:2.3:a:salesforce:tough-cookie:2.5.0
Salesforce » Tough-Cookie » Version: 3.0.0

cpe:2.3:a:salesforce:tough-cookie:3.0.0
Salesforce » Tough-Cookie » Version: 3.0.1

cpe:2.3:a:salesforce:tough-cookie:3.0.1
Salesforce » Tough-Cookie » Version: 4.0.0

cpe:2.3:a:salesforce:tough-cookie:4.0.0
Salesforce » Tough-Cookie » Version: 4.1.0

cpe:2.3:a:salesforce:tough-cookie:4.1.0
Salesforce » Tough-Cookie » Version: 4.1.1

cpe:2.3:a:salesforce:tough-cookie:4.1.1
Salesforce » Tough-Cookie » Version: 4.1.2

cpe:2.3:a:salesforce:tough-cookie:4.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26136

Products

Pricing

Contact Us