Lucene search

PRIOn knowledge basePRION:CVE-2018-16492

HistoryFeb 01, 2019 - 6:29 p.m.

Buffer overflow

2019-02-0118:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.

CPENameOperatorVersion
extendlt2.0.2
extendge3.0.0
extendlt3.0.2

Name	Operator	Version
extend	lt	2.0.2
extend	ge	3.0.0
extend	lt	3.0.2

References

hackerone.com/reports/381185