Description


This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object.

Related CPE's


References


https://runkit.com/embed/sq8qjwemyn8t

Third Party AdvisoryURL Repurposed

Weaknesses



CWE-1321

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-10-20T13:15:07.537

3 years ago

Last modified

2024-02-14T01:17:43.863

1 year ago