CVE-2021-3805

Katalog CVE

CVSS 7.5 · High EPSS 2,0%

Kerentanan Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') pada object-path project object-path, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Rincian

Terbit di NVD

17 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 80,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/mariocasciaro/object-path/commit/e6bb638ffdd431176701b3e9024f80050d0ef0a6 patch · advisory pihak ketiga
• https://huntr.dev/bounties/571e3baf-7c46-46e3-9003-ba7e4e623053 exploit · issue tracking · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/01/msg00031.html mailing list · advisory pihak ketiga