CVE-2022-25301

Prototype Pollution

High · published May 1, 2022

CVSS v3.1
7.7
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H/E:P
CVSS v4.0
Not supplied
EPSS
0.01236 · 68.8th percentile
Published
2022-05-01T16:25Z
EPSS history
Timeline
  • 01 MAY 16:25Z
    Prototype Pollution
    cvelistv5