Lucene search
GoogleOSV:CVE-2021-23434HistoryAug 27, 2021 - 5:15 p.m.
CVE-2021-23434
2021-08-2717:15:06
Google
osv.dev
6
This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components used in the path parameter are arrays. In particular, the condition currentPath === ‘proto’ returns false if currentPath is [‘proto’]. This is because the === operator returns always false when the type of the operands is different.
| CPE | Name | Operator | Version |
|---|---|---|---|
| object-path | eq | 0.10.0 | |
| object-path | eq | 0.5.1 | |
| object-path | eq | 0.1.2 | |
| object-path | eq | 0.7.0 | |
| object-path | eq | 0.1.0 | |
| object-path | eq | 0.8.0 | |
| object-path | eq | 0.9.0 | |
| object-path | eq | 0.9.2 | |
| object-path | eq | 0.2.1 | |
| object-path | eq | 0.2.0 |
Related
github
github
Prototype Pollution in object-path
2021-09-01 18:37:11
Prototype pollution in object-path
2020-10-19 20:55:55
redhatcve
redhatcve
CVE-2021-23434
2021-08-31 18:49:33
CVE-2020-15256
2020-11-27 14:51:36
ubuntucve
ubuntucve
CVE-2021-23434
2021-08-27 00:00:00
CVE-2020-15256
2020-10-19 00:00:00
osv
osv
Prototype Pollution in object-path
2021-09-01 18:37:11
node-object-path vulnerabilities
2023-03-22 00:07:34
CVE-2020-15256
2020-10-19 22:15:13
cvelist
cvelist
CVE-2021-23434 Prototype Pollution
2021-08-27 00:00:00
CVE-2020-15256 Prototype pollution in object-path
2020-10-19 21:25:13
debiancve
debiancve
CVE-2021-23434
2021-08-27 17:15:06
CVE-2020-15256
2020-10-19 22:15:13
prion
prion
Type confusion
2021-08-27 17:15:00
Design/Logic Flaw
2020-10-19 22:15:00
nessus
nessus
RHEL 7 : io.enmasse-enmasse (Unpatched Vulnerability)
2024-06-03 00:00:00
Debian DLA-3291-1 : node-object-path - LTS security update
2023-01-31 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : object-path vulnerabilities (USN-5967-1)
2023-03-22 00:00:00
cve
cve
CVE-2021-23434
2021-08-27 17:15:06
CVE-2020-15256
2020-10-19 22:15:13
nvd
nvd
CVE-2021-23434
2021-08-27 17:15:06
CVE-2020-15256
2020-10-19 22:15:13
debian
debian
[SECURITY] [DLA 3291-1] node-object-path security update
2023-01-29 16:18:03
ubuntu
ubuntu
object-path vulnerabilities
2023-03-22 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3291-1)
2023-01-30 00:00:00
Ubuntu: Security Advisory (USN-5967-1)
2023-03-23 00:00:00
githubexploit
githubexploit
Exploit for CVE-2020-15256
2020-12-08 13:40:01
cnvd
cnvd
Object-path has an unspecified vulnerability
2021-08-31 00:00:00
huntr
huntr
Prototype Pollution in mariocasciaro/object-path
2020-09-14 00:00:00
veracode
veracode
Prototype Pollution
2021-08-30 02:41:28
Prototype Pollution
2020-10-20 01:39:11
nodejs
nodejs
Prototype Pollution
2020-10-19 21:18:04
ibm
ibm
