Allpro vulnerabilities
We track 1 vulnerability in Allpro products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 30, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Allpro vulnerabilities
- 9.8 Critical severity
form-manager: Improperly Controlled Modification of Object Prototype Attributes
Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the functions setDefaults, mergeBranch, and Object.setObjectValue.