CVE-2021-3666

2021-09-1318:15:25

Google

osv.dev

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’)

CPENameOperatorVersion
body-parser-xmleq1.0.0
body-parser-xmleq2.0.2
body-parser-xmleq2.0.0
body-parser-xmleq2.0.1
body-parser-xmleq1.1.0

Name	Operator	Version
body-parser-xml	eq	1.0.0
body-parser-xml	eq	2.0.2
body-parser-xml	eq	2.0.0
body-parser-xml	eq	2.0.1
body-parser-xml	eq	1.1.0

References

github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63

huntr.dev/bounties/1-other-fiznool/body-parser-xml