Lucene search
+L

1 matches found

OSV
OSV
added 2022/04/13 12:00 a.m.11 views

GHSA-6XWR-Q98W-RVG7 Prototype Pollution in nconf

nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to...

7.3CVSS7.2AI score0.01753EPSS
SaveExploits1References5
Rows per page
Query Builder