Lucene search

GoogleOSV:GHSA-2GHC-6V89-PW9J

HistorySep 14, 2021 - 8:25 p.m.

body-parser-xml vulnerable to Prototype Pollution

2021-09-1420:25:35

Google

osv.dev

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’).

CPENameOperatorVersion
body-parser-xmllt2.0.3

CPE	Name	Operator	Version
	body-parser-xml	lt	2.0.3

References

github.com/fiznool/body-parser-xml

github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63

huntr.dev/bounties/1-other-fiznool/body-parser-xml

nvd.nist.gov/vuln/detail/CVE-2021-3666