← volver
CVE-2021-3666

Prototype Pollution in fiznool/body-parser-xml

CVSS 7.6 HIGHEPSS 1.3%CWE-1321
body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Productos afectados
fiznool · fiznool/body-parser-xml

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63https://huntr.dev/bounties/1-other-fiznool/body-parser-xml