Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/08 12:00 a.m.•3 views

CVE-2021-21304: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout the codebase for various operations...

9.8CVSS5.8AI score0.01894EPSS
SaveExploits0References4
Rows per page
Query Builder