Prototype Pollution
CVE-2021-23702

7.6HIGH

Key Information:

Vendor: Object-extend Project
Status: Object-extend
Vendor: CVE Published:; 18 February 2022

🔔 Create Object-extend Project Vulnerability Alert

What is CVE-2021-23702?

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.

Affected Version(s)

object-extend 0.0.0

References

https://snyk.io/vuln/SNYK-JS-OBJECTEXTEND-2401470

x_refsource_MISC

CVSS V3.1

Score:

7.6

Severity:

HIGH

Confidentiality:

Low

Integrity:

High

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Feb 18, 2022
Vulnerability Reserved
Jan 8, 2021

Credit

Feng Xiao

.