CVE-2021-20085

2021-04-2319:15:10

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.0%

JSON

Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype.

CPENameOperatorVersion
backbone-query-parameterseq0.2.4
backbone-query-parameterseq0.2.5
backbone-query-parameterseq0.4.0
backbone-query-parameterseq0.3.0
backbone-query-parameterseq0.2.3
backbone-query-parameterseq0.3.1
backbone-query-parameterseq0.2.2

Name	Operator	Version
backbone-query-parameters	eq	0.2.4
backbone-query-parameters	eq	0.2.5
backbone-query-parameters	eq	0.4.0
backbone-query-parameters	eq	0.3.0
backbone-query-parameters	eq	0.2.3
backbone-query-parameters	eq	0.3.1
backbone-query-parameters	eq	0.2.2