exploitDog

CVE-2023-26135

Опубликовано: 30 июн. 2023

Источник: nvd

CVSS3: 7.3

CVSS3: 9.8

EPSS Низкий

Описание

All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file.

Ссылки

https://github.com/brycebaril/node-flatnest/blob/b7d97ec64a04632378db87fcf3577bd51ac3ee39/nest.js%23L43
Broken Link
https://github.com/brycebaril/node-flatnest/commit/27d569baf9d9d25677640edeaf2d13af165868d6
https://github.com/brycebaril/node-flatnest/issues/4
Exploit
Issue Tracking
https://security.snyk.io/vuln/SNYK-JS-FLATNEST-3185149
Exploit
Third Party Advisory
https://github.com/brycebaril/node-flatnest/blob/b7d97ec64a04632378db87fcf3577bd51ac3ee39/nest.js%23L43
Broken Link
https://github.com/brycebaril/node-flatnest/commit/27d569baf9d9d25677640edeaf2d13af165868d6
https://github.com/brycebaril/node-flatnest/issues/4
Exploit
Issue Tracking
https://security.snyk.io/vuln/SNYK-JS-FLATNEST-3185149
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:flatnest_project:flatnest:*:*:*:*:*:node.js:*:*

EPSS

Процентиль: 23%

0.00076

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-1321

CWE-1321

Связанные уязвимости

GHSA-7px2-3c2p-q4v4

CVSS3: 7.3

github

больше 2 лет назад

flatnest Prototype Pollution vulnerability

EPSS

Процентиль: 23%

0.00076

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-1321

CWE-1321