Beveiligingsadvies

CVE-2021-23328

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-29 16:15:18
Laatst bijgewerkt 2024-09-17 01:42:00
Toegewezen door snyk
CVSS-score 5.6
Status PUBLISHED

Beschrijving

This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.