Lucene search
Olivier Arteau (HoLyVieR)NODEJS:581HistoryApr 24, 2018 - 2:37 p.m.
Prototype Pollution
2018-04-2414:37:11
Olivier Arteau (HoLyVieR)
www.npmjs.com
11
0.001 Low
EPSS
Percentile
41.1%
Overview
Versions of default-deep before 0.2.4 are vulnerable to prototype pollution
Recommendation
Update to version 0.2.4 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| defaults-deep | lt | 0.2.4 |
Related
veracode
veracode
Prototype Pollution
2018-02-21 02:52:28
github
github
Prototype Pollution in defaults-deep
2018-07-26 15:18:43
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (defaults-deep)
2018-01-30 15:14:22
cve
cve
CVE-2018-3723
2018-06-07 02:29:08
prion
prion
Code injection
2018-06-07 02:29:00
osv
osv
Prototype Pollution in defaults-deep
2018-07-26 15:18:43
CVE-2018-3723
2018-06-07 02:29:08
cvelist
cvelist
CVE-2018-3723
2018-04-26 00:00:00
nvd
nvd
CVE-2018-3723
2018-06-07 02:29:08