CVE-2018-16472CWE-400

A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by…

published November 6, 2018

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02141 · 81.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-11-06T00:00Z
EPSS history
Timeline
  • 06 NOV 00:00Z
    A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by…
    cvelistv5