Security Bulletin: Vulnerability in min-dash affects IBM Process Mining [CVE-2021-23460]

Summary There is a vulnerability in min-dash that could allow a remote attacker to execute arbitrary code on the system. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. CVE-2021-23460 Vulnerability Details...

CVE-2021-23460

creationtimestamp| type| source ---|---|--- 2022-01-21 22:14:14+00:00| seen| https://t.me/cibsecurity/36060 2022-01-27 16:09:19+00:00| published-proof-of-concept| https://github.com/bpmn-io/min-dash/security/advisories/GHSA-2m53-83f3-562j...

CVE-2021-23460 Prototype Pollution

The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types...