billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cve.naver.com/detail/cve-2025-49223.html | Vendor Advisory |
Configurations
History
06 Jun 2025, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Naver
Naver billboard.js |
|
| References | () https://cve.naver.com/detail/cve-2025-49223.html - Vendor Advisory | |
| CPE | cpe:2.3:a:naver:billboard.js:*:*:*:*:*:*:*:* |
04 Jun 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-04 03:15
Updated : 2025-06-06 19:30
NVD link : CVE-2025-49223
Mitre link : CVE-2025-49223
JSON object : View
Products Affected
naver
- billboard.js
CWE
No CWE.