Non notée
CVE-2018-16472 A prototype pollution attack in cached-path-relative…
Description
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| cached-path-relative 1.0 | premières → 1.0.1 | Pas de correctif indiqué |
Références
- hackerone.com hackerone.com
- [debian-lts-announce] 20221204 [SECURITY] [DLA 3221-1] node-cached-path-relative security update lists.debian.org
Chronologie
- Publiée
- Dernière modification