Lucene search
SnykCVELIST:CVE-2021-23419HistoryAug 08, 2021 - 7:30 a.m.
CVE-2021-23419 Prototype Pollution
2021-08-0807:30:12
snyk
www.cve.org
1
package open-graph
vulnerability
parse
prototype pollution
object.prototype
constructor payload
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
AI Score
9.7
Confidence
High
EPSS
0.004
Percentile
72.4%
This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload.
CNA Affected
[
{
"product": "open-graph",
"vendor": "n/a",
"versions": [
{
"lessThan": "0.2.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
osv
osv
Prototype Pollution in open-graph
2021-09-01 18:31:53
CVE-2021-23419
2021-08-08 08:15:06
prion
prion
Design/Logic Flaw
2021-08-08 08:15:00
nvd
nvd
CVE-2021-23419
2021-08-08 08:15:06
cve
cve
CVE-2021-23419
2021-08-08 08:15:06
cnvd
cnvd
Unspecified vulnerability in node-open-graph
2021-08-10 00:00:00
github
github
Prototype Pollution in open-graph
2021-09-01 18:31:53
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
AI Score
9.7
Confidence
High
EPSS
0.004
Percentile
72.4%
Related for CVELIST:CVE-2021-23419