Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cnvdChina National Vulnerability DatabaseCNVD-2021-67507
HistoryAug 31, 2021 - 12:00 a.m.

Object-path has an unspecified vulnerability

2021-08-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

object-path is a personal developer’s Npm library for accessing variables in data structures via paths. object-path versions prior to 0.11.6 have a security vulnerability that results from a type obfuscation vulnerability when the path component used in the path parameter is an array. No details of the vulnerability are currently available.

CPENameOperatorVersion
object-path object-pathlt0.11.6

Related

veracode 1
prion 1
debiancve 1
github 1
osv 4
ubuntucve 1
redhatcve 1
cve 1
nessus 2
debian 1
ubuntu 1
openvas 2
redhat 3
ibm 1
veracode
veracode
Prototype Pollution
2021-08-30 02:41:28
prion
prion
Type confusion
2021-08-27 17:15:00
debiancve
debiancve
CVE-2021-23434
2021-08-27 17:15:00
github
github
Prototype Pollution in object-path
2021-09-01 18:37:11
osv
osv
node-object-path - security update
2023-01-29 00:00:00
CVE-2021-23434
2021-08-27 17:15:06
Prototype Pollution in object-path
2021-09-01 18:37:11
ubuntucve
ubuntucve
CVE-2021-23434
2021-08-27 00:00:00
redhatcve
redhatcve
CVE-2021-23434
2021-08-31 18:49:33
cve
cve
CVE-2021-23434
2021-08-27 17:15:00
nessus
nessus
Debian DLA-3291-1 : node-object-path - LTS security update
2023-01-31 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : object-path vulnerabilities (USN-5967-1)
2023-03-22 00:00:00
debian
debian
[SECURITY] [DLA 3291-1] node-object-path security update
2023-01-29 16:18:03
ubuntu
ubuntu
object-path vulnerabilities
2023-03-22 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3291-1)
2023-01-30 00:00:00
Ubuntu: Security Advisory (USN-5967-1)
2023-03-23 00:00:00
redhat
redhat
(RHSA-2021:3873) Important: Red Hat Advanced Cluster Management 2.2.9 security, bug, and container updates
2021-10-14 19:47:17
(RHSA-2021:3925) Important: Red Hat Advanced Cluster Management 2.3.3 bug fix, security, and image updates
2021-10-19 23:47:29
(RHSA-2022:0856) Moderate: Red Hat Advanced Cluster Management 2.2.11 security updates and bug fixes
2022-03-14 12:22:55
ibm
ibm
Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities
2022-04-01 16:38:26

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for CNVD-2021-67507
veracode1prion1debiancve1github1osv4ubuntucve1redhatcve1cve1nessus2debian1ubuntu1openvas2redhat3ibm1