cve/2019/CVE-2019-10768.md
2024-06-09 00:33:16 +00:00

730 B

CVE-2019-10768

Description

In AngularJS before 1.7.9 the function merge() could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

POC

Reference

Github