← voltar
CVE-2021-3666

Prototype Pollution in fiznool/body-parser-xml

CVSS 7.6 HIGHEPSS 1.3%CWE-1321
body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Produtos afetados
fiznool · fiznool/body-parser-xml

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63https://huntr.dev/bounties/1-other-fiznool/body-parser-xml