CVE-2018-16490

Опубликовано: 01 фев. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

https://hackerone.com/reports/390860
Exploit
Issue Tracking
Third Party Advisory
https://hackerone.com/reports/390860
Exploit
Issue Tracking
Third Party Advisory

Конфигурация 1

cpe:2.3:a:mpath_project:mpath:*:*:*:*:*:node.js:*:*

Версия до 0.5.1 (исключая)

EPSS

Процентиль: 45%

0.00221

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

CWE-400

CWE-74

CVE-2018-16490

CVSS3: 4.2

redhat

около 7 лет назад