Prototypejs
1 CVEs
vendor
Monthly
Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Prototype
Prototypejs
NVD
GitHub
CVSS 3.1
4.3
EPSS
0.7%
EPSS 1%
CVSS 4.3
MEDIUM
This Month
Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Prototype
Prototypejs
NVD
GitHub