cve/2018/CVE-2018-16492.md

CVE-2018-16492

Description

A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.

POC

Reference

• https://hackerone.com/reports/381185

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/AleBekk/DependencyCheckParser
• https://github.com/dsp-testing/CVE-2018-16492
• https://github.com/javascript-benchmark/ossf-cve-benchmark
• https://github.com/ossf-cve-benchmark/CVE-2018-16492
• https://github.com/ossf-cve-benchmark/ossf-cve-benchmark