GitHub Advisoryadvisory · npm

GHSA-vhxc-fhm5-qcp9 Prototype Pollution in bodymen

MEDIUM Published 2022-03-18 Modified 2022-03-18 Official page ↗
Aliases
CVE-2022-25296
Ecosystem
npm
Packages
bodymen
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-1321
Reviewed
2022-03-18

Affected packages

• npm bodymen: >= 0.0.0 (no fix yet)

Description

The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. Note: This vulnerability derives from an incomplete fix to CVE-2019-10792

Related

Alias · CVE (1)

  • CVE-2022-25296 The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References