CVE-2018-3719CWE-471
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the…
published June 7, 2018
What it is
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.02090 · 81.3th percentile
- Weakness
- CWE-471 · Modification of Assumed-Immutable Data (MAID)
- Published
- 2018-06-07T02:00Z
EPSS history
Timeline