1 matches found
CVE-2021-21304: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout the codebase for various operations...
9.8CVSS5.8AI score0.01894EPSS
SaveExploits0References4
20