Lucene search
+L

3 matches found

CVE
CVE
•added 2022/02/04 8:05 p.m.•98 views

CVE-2021-23507

CVE-2021-23507 affects the npm package object-path-set . Versions before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, enabling an attacker to merge properties into object prototypes. Impact can include denial of service or potential remote code execution, per the provided r...

9.8CVSS8.6AI score0.02125EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2022/02/04 8:05 p.m.•51 views

CVE-2021-23507 Prototype Pollution

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...

7.5CVSS9.7AI score0.02125EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/02/04 8:00 p.m.•9 views

CVE-2021-23507

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...

9.8CVSS7.2AI score0.02125EPSS
SaveExploits1References5
Rows per page
Query Builder