2024-05-25 21:48:12 +02:00
|
|
|
### [CVE-2021-23448](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23448)
|
|
|
|
|

|
2025-09-29 21:09:30 +02:00
|
|
|

|
|
|
|
|

|
2024-05-25 21:48:12 +02:00
|
|
|
|
|
|
|
|
### Description
|
|
|
|
|
|
|
|
|
|
All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.
|
|
|
|
|
|
|
|
|
|
### POC
|
|
|
|
|
|
|
|
|
|
#### Reference
|
|
|
|
|
- https://github.com/jarradseers/config-handler/issues/1
|
|
|
|
|
|
|
|
|
|
#### Github
|
|
|
|
|
No PoCs found on GitHub currently.
|
|
|
|
|
|