CVE-2021-23426

Prototype Pollution

Medium · published September 1, 2021

CVSS v3.1
5.6
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00861 · 58.1th percentile
Published
2021-09-01T14:25Z
EPSS history
Timeline
  • 01 SEP 14:25Z
    Prototype Pollution
    cvelistv5