CVE-2021-43138

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js…

published April 6, 2022

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03346 · 88.6th percentile
Published
2022-04-06T00:00Z
EPSS history
Timeline
  • 06 APR 00:00Z
    In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js…
    cvelistv5