CVEvulnerability
CVE-2023-26920
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-1321
Description
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
Affected configurations
• naturalintelligence fast xml parser (< 4.1.2)
Related
Weakness · CWE (1)
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness
References
- https://gist.github.com/Sudistark/a5a45bd0804d522a1392cb5023aa7ef7 Exploit
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/2b032a4f799c63d83991e4f992f1c68e4dd05804 Patch
- https://github.com/advisories/GHSA-793h-6f7r-6qvm Third Party Advisory
- https://gist.github.com/Sudistark/a5a45bd0804d522a1392cb5023aa7ef7 Exploit
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/2b032a4f799c63d83991e4f992f1c68e4dd05804 Patch
- https://github.com/advisories/GHSA-793h-6f7r-6qvm Third Party Advisory