2 matches found
CVE-2021-23820: Access of Resource Using Incompatible Type
This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...
9.8CVSS5.7AI score0.01873EPSS
SaveExploits1References2
PT-2021-8000
Name of the Vulnerable Software and Affected Versions jsonpointer versions prior to 5.0.0 Description A type confusion issue in the jsonpointer package can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays. This can potentially allow a remote attacker t...
10CVSS0.02752EPSS
SaveExploits1References16
20