Prototype Pollution Vulnerability in Bodymen by Diego Haz
CVE-2019-10792

6.3MEDIUM

Key Information:

Vendor

Snyk

Status
Bodymen
Vendor
CVE Published:
18 February 2020

What is CVE-2019-10792?

The Bodymen JavaScript library, prior to version 1.1.1, is susceptible to a Prototype Pollution vulnerability. This issue allows an attacker to manipulate the properties of Object.prototype through crafted 'proto' payloads. Such exploitation can lead to unexpected behavior in the application, as it may inadvertently modify fundamental objects. Developers using Bodymen should prioritize upgrading to the latest version to mitigate this risk.

Affected Version(s)

bodymen All versions prior to version 1.1.1

References

https://github.com/diegohaz/bodymen/commit/5d52e8cf360410...
x_refsource_MISC
https://snyk.io/vuln/SNYK-JS-BODYMEN-548897
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.