Lucene search
Veracode Vulnerability DatabaseVERACODE:5819HistoryFeb 15, 2018 - 5:41 a.m.
Prototype Pollution
2018-02-1505:41:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.01 Low
EPSS
Percentile
83.9%
hoek is vulnerable to prototype pollution attacks. Attackers can add or modify existing properties relating to an Object by using the utilities function to change the prototype of said Object. Using this flaw, attackers can trigger denial of service (DoS) attacks and in some situations remote code execution (RCE) attacks.
References
www.securityfocus.com/bid/103108
access.redhat.com/errata/RHSA-2018:1263
access.redhat.com/errata/RHSA-2018:1264
github.com/hapijs/hoek/commit/32ed5c9413321fbc37da5ca81a7cbab693786dee
github.com/hapijs/hoek/commit/5aed1a8c4a3d55722d1c799f2368857bf418d6df
hackerone.com/reports/310439
nodesecurity.io/advisories/566
www.npmjs.com/advisories/566
Related
ubuntucve
ubuntucve
CVE-2018-3728
2018-03-30 00:00:00
debiancve
debiancve
CVE-2018-3728
2018-03-30 19:29:00
nessus
nessus
RHEL 8 : hoek (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : nodejs-hoek (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)
2018-05-04 00:00:00
cve
cve
CVE-2018-3728
2018-03-30 19:29:00
redhatcve
redhatcve
CVE-2018-3728
2020-04-01 02:12:07
osv
osv
Prototype Pollution in hoek
2018-04-26 15:25:17
CVE-2018-3728
2018-03-30 19:29:00
prion
prion
Code injection
2018-03-30 19:29:00
cvelist
cvelist
CVE-2018-3728
2018-03-30 19:00:00
nvd
nvd
CVE-2018-3728
2018-03-30 19:29:00
ibm
ibm
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (Hoek)
2018-01-30 06:24:55
nodejs
nodejs
Prototype Pollution
2018-04-20 21:25:58
github
github
Prototype Pollution in hoek
2018-04-26 15:25:17
redhat
redhat