CVE-2023-0163

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

CVE-2023-0163

creationtimestamp| type| source ---|---|--- 2024-11-26 11:39:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113549062152557037...

CVE-2023-0163

Mozilla Convict, a configuration management library for Node.js, is vulnerable to a Prototype Pollution vulnerability (CWE-1321 ) in versions before 6.2.4 . An attacker can inject attributes into other components or override existing attributes with incompatible types, potentially leading to a cr...

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +54 more potentially affected by CVE-2023-0163 via convict (>=6.0.0, <=6.2.3)

convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2023-0163 Source advisory: OSV:GHSA-4JRM-C32X-W4JF...