Lucene search
+L

3 matches found

OSV
OSV
•added 2022/02/10 11:52 p.m.•42 views

GHSA-R5CQ-9537-9RPF Prototype Pollution in mixme

Node.js mixme 0.5.0, an attacker can add or alter properties of an object via 'proto' through the mutate and merge functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential denial of servic...

9.1CVSS7.7AI score0.01843EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2021/05/03 12:15 p.m.•8 views

CVE-2021-28860

In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via 'proto' through the mutate and merge functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential...

9.1CVSS8.2AI score0.01843EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/03 12:00 a.m.•3 views

CVE-2021-28860: Improperly Controlled Modification of Object Prototype Attributes

In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via 'proto' through the mutate and merge functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential...

9.1CVSS5.8AI score0.01843EPSS
SaveExploits0References12
Rows per page
Query Builder