Beveiligingsadvies

CVE-2018-3723

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-06-07 02:00:00
Laatst bijgewerkt 2024-09-16 21:08:12
Toegewezen door hackerone
CVSS-score geen score
Status PUBLISHED

Beschrijving

defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.