Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-3719

Опубликовано: 07 июн. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 6.5
CVSS3: 8.8

Описание

mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property that will exist on all objects.

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

Показывать по

6.5 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
почти 8 лет назад

mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

CVSS3: 8.8
nvd
больше 7 лет назад

mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

CVSS3: 8.8
debian
больше 7 лет назад

mixin-deep node module before 1.3.1 suffers from a Modification of Ass ...

CVSS3: 8.8
github
больше 7 лет назад

Prototype Pollution in mixin-deep

6.5 Medium

CVSS2

8.8 High

CVSS3