Beveiligingsadvies

CVE-2022-25296

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-17 11:20:16

Laatst bijgewerkt 2024-09-17 01:16:33

Toegewezen door snyk

CVSS-score 6.3

Status PUBLISHED

Beschrijving

The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. **Note:** This vulnerability derives from an incomplete fix to [CVE-2019-10792](https://security.snyk.io/vuln/SNYK-JS-BODYMEN-548897)

← Alle CVE's bekijken Bekijk op cve.org ↗