Prototype Pollution

🗓️ 06 Jul 2023 09:09:49Reported by Veracode Vulnerability DatabaseType

protobufjs vulnerability in setProperty function

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js modules affect IBM Voice Gateway	14 Aug 202319:58	–	ibm
IBM Security Bulletins	Security Bulletin: protobuf.js component is vulnerable which is used by IBM Maximo Application Suite [CVE-2023-36665]	29 Aug 202321:00	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	15 Feb 202413:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attack and a denial of service due to Node.js modules protobuf.js, vm2 and word-wrap [CVE-2023-36665, CVE-2023-37903, CVE-2023-37466 and CVE-2023-26115]	11 Sep 202316:26	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	11 Aug 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use Google PubSub nodes are vulnerable to arbitrary code execution due to [CVE-2023-36665]	31 Jul 202317:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Prototype Pollution in Grafana (CVE-2023-36665)	22 Jul 202422:17	–	ibm
ATTACKERKB	CVE-2023-36665	5 Jul 202314:15	–	attackerkb
Chainguard	CVE-2023-36665 vulnerabilities	22 Mar 202510:12	–	cgr
Circl	CVE-2023-36665	5 Jul 202318:21	–	circl

Vulners

Node

protobufjs_project protobufjsRange6.10.0-beta.1–6.11.3js

Source	Link
github	www.github.com/protobufjs/protobuf.js/commit/e66379f451b0393c27d87b37fa7d271619e16b0d
github	www.github.com/protobufjs/protobuf.js/pull/1899
github	www.github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.2.4
code-intelligence	www.code-intelligence.com/blog/cve-protobufjs-prototype-pollution-cve-2023-36665
github	www.github.com/protobufjs/protobuf.js/compare/protobufjs-v7.2.3...protobufjs-v7.2.4
security	www.security.netapp.com/advisory/ntap-20240628-0006/

10 Jul 2024 13:53Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.01688

SSVC