Lucene search
PRIOn knowledge basePRION:CVE-2021-23518HistoryJan 21, 2022 - 8:15 p.m.
Path traversal
2022-01-2120:15:00
PRIOn knowledge base
www.prio-n.com
3
The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative path. When using the origin path as proto, the attribute of the object is accessed instead of a path. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-CACHEDPATHRELATIVE-72573
| CPE | Name | Operator | Version |
|---|---|---|---|
| cached-path-relative | lt | 1.1.0 | |
| debian_linux | eq | 10.0 |
Related
veracode
veracode
Prototype Pollution
2022-01-24 07:29:47
cvelist
cvelist
CVE-2021-23518 Prototype Pollution
2022-01-21 00:00:00
debiancve
debiancve
CVE-2021-23518
2022-01-21 20:15:07
redhatcve
redhatcve
CVE-2021-23518
2022-01-24 22:35:17
osv
osv
CVE-2021-23518
2022-01-21 20:15:07
Prototype Pollution in cached-path-relative
2022-01-27 14:27:53
node-cached-path-relative - security update
2022-12-05 00:00:00
cve
cve
CVE-2021-23518
2022-01-21 20:15:07
nvd
nvd
CVE-2021-23518
2022-01-21 20:15:07
ubuntucve
ubuntucve
CVE-2021-23518
2022-01-21 00:00:00
github
github
Prototype Pollution in cached-path-relative
2022-01-27 14:27:53
openvas
openvas
Debian: Security Advisory (DLA-3221-1)
2022-12-05 00:00:00
nessus
nessus
Debian DLA-3221-1 : node-cached-path-relative - LTS security update
2022-12-05 00:00:00
debian
debian
[SECURITY] [DLA 3221-1] node-cached-path-relative security update
2022-12-04 23:52:15
redhat
redhat