CVE-2021-4245

2022-12-1520:15:09

CWE-1321

CWE-74

[email protected]

web.nvd.nist.gov

cve-2021-4245

chbrown

rfc6902

vulnerability

object prototype

prototype pollution

exploit

patch

vdb-215883

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

JSON

A vulnerability classified as problematic has been found in chbrown rfc6902. This affects an unknown part of the file pointer.ts. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’). The exploit has been disclosed to the public and may be used. The name of the patch is c006ce9faa43d31edb34924f1df7b79c137096cf. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215883.

Affected configurations

NVD

Node

rfc6902_projectrfc6902Range<5.0.0

CPENameOperatorVersion
rfc6902_project:rfc6902rfc6902 project rfc6902lt5.0.0

CPE	Name	Operator	Version
rfc6902_project:rfc6902	rfc6902 project rfc6902	lt	5.0.0

CNA Affected

[
  {
    "vendor": "chbrown",
    "product": "rfc6902",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]