Lucene search

K
cvelist@huntrdevCVELIST:CVE-2021-3645
HistorySep 10, 2021 - 11:04 a.m.

CVE-2021-3645 Prototype Pollution in viking04/merge

2021-09-1011:04:25
CWE-1321
@huntrdev
www.cve.org
3
merge
vulnerable
prototype pollution
cve-2021-3645
viking04

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

9.7

Confidence

High

EPSS

0.004

Percentile

72.4%

merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’)

CNA Affected

[
  {
    "product": "viking04/merge",
    "vendor": "viking04",
    "versions": [
      {
        "lessThan": "1.0.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

9.7

Confidence

High

EPSS

0.004

Percentile

72.4%

Related for CVELIST:CVE-2021-3645