CVE-2021-23440

🗓️ 12 Sep 2021 13:07:15Reported by snykType

CVE-2021-23440 affects set-value package. Type confusion vulnerability can bypass CVE-2019-10747

Reporter	Title	Published	Views	Family All 65
OSV	Prototype Pollution in set-value	13 Sep 202120:09	–	osv
OSV	CVE-2021-23440	12 Sep 202113:15	–	osv
OSV	Prototype Pollution in set-value	27 Aug 201917:43	–	osv
OSV	CVE-2019-10747	23 Aug 201917:15	–	osv
OSV	Moderate: nodejs:12 security update	16 Feb 202107:34	–	osv
OSV	Red Hat Security Advisory: nodejs:12 security update	13 Sep 202422:43	–	osv
OSV	Moderate: nodejs:12 security update	16 Feb 202107:34	–	osv
OSV	Red Hat Security Advisory: rh-nodejs12-nodejs security update	13 Sep 202422:44	–	osv
Prion	Type confusion	12 Sep 202113:15	–	prion
Prion	Code injection	23 Aug 201917:15	–	prion

Nvd

Node

set-value_project set-valueRange<2.0.1node.js

set-value_project set-valueRange3.0.0–4.0.1node.js

Node

oracle communications_cloud_native_core_policyMatch1.14.0

[
  {
    "product": "set-value",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "<2.0.1"
      },
      {
        "status": "affected",
        "version": ">=3.0.0 <4.0.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/jonschlinkert/set-value/pull/33
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1584212
huntr	www.huntr.dev/bounties/2eae1159-01de-4f82-a177-7478a408c4a2/
snyk	www.snyk.io/vuln/SNYK-JS-SETVALUE-1540541
github	www.github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452
oracle	www.oracle.com/security-alerts/cpujan2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Sep 2021 13:15Current

8.2High risk

Vulners AI Score8.2

CVSS27.5

CVSS39.8

EPSS0.014

CWE-843