Lucene search
+L
ClientJointjs

1 matches found

CVE
CVE
added 2021/09/21 4:55 p.m.62 views

CVE-2021-23444

CVE-2021-23444 affects the open-source library jointjs up to version before 3.4.2 . The documented issue is a prototype pollution/type confusion vulnerability in the setByPath function, where user-provided keys in the path parameter (as arrays) can bypass a previously fixed vulnerability (CVE-202...

9.8CVSS7.2AI score0.0186EPSS
Save