Lucene search
GoogleOSV:CVE-2021-23518HistoryJan 21, 2022 - 8:15 p.m.
CVE-2021-23518
2022-01-2120:15:07
Google
osv.dev
9
cve-2021-23518
prototype pollution
cached-path-relative
The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative path. When using the origin path as proto, the attribute of the object is accessed instead of a path. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-CACHEDPATHRELATIVE-72573
Related
ubuntucve
ubuntucve
CVE-2021-23518
2022-01-21 00:00:00
osv
osv
Prototype Pollution in cached-path-relative
2022-01-27 14:27:53
node-cached-path-relative - security update
2022-12-05 00:00:00
github
github
Prototype Pollution in cached-path-relative
2022-01-27 14:27:53
nvd
nvd
CVE-2021-23518
2022-01-21 20:15:07
veracode
veracode
Prototype Pollution
2022-01-24 07:29:47
debiancve
debiancve
CVE-2021-23518
2022-01-21 20:15:07
cvelist
cvelist
CVE-2021-23518 Prototype Pollution
2022-01-21 20:05:29
prion
prion
Path traversal
2022-01-21 20:15:00
redhatcve
redhatcve
CVE-2021-23518
2022-01-24 22:35:17
cve
cve
CVE-2021-23518
2022-01-21 20:15:07
nessus
nessus
Debian DLA-3221-1 : node-cached-path-relative - LTS security update
2022-12-05 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3221-1)
2022-12-05 00:00:00
debian
debian
[SECURITY] [DLA 3221-1] node-cached-path-relative security update
2022-12-04 23:52:15
redhat
redhat