admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 17:22:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2018/CVE-2018-3751.md
0xMarcio ba290685fe Update CVE sources 2024-06-09 00:33
2024-06-09 00:33:16 +00:00

801 B
Raw Blame History

CVE-2018-3751

Description

The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects.

POC

Reference

Github

No PoCs found on GitHub currently.