Lucene search
Veracode Vulnerability DatabaseVERACODE:5832HistoryFeb 21, 2018 - 1:58 a.m.
Prototype Pollution
2018-02-2101:58:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.001
Percentile
41.0%
mixin-deep is vulnerable to prototype pollution attacks. Attackers can add or modify existing properties relating to an Object by using the utilities function to change the prototype of said Object. Using this flaw, attackers can trigger denial of service (DoS) attacks and in some situations remote code execution (RCE) attacks.
Related
nodejs
nodejs
Prototype Pollution
2018-04-24 14:30:28
osv
osv
CVE-2018-3719
2018-06-07 02:29:08
Prototype Pollution in mixin-deep
2018-07-26 15:10:54
github
github
Prototype Pollution in mixin-deep
2018-07-26 15:10:54
nessus
nessus
Fedora 28 : nodejs-mixin-deep (2018-ab62814cee)
2019-01-03 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: nodejs-mixin-deep-1.3.1-1.fc28
2018-05-30 14:11:12
nvd
nvd
CVE-2018-3719
2018-06-07 02:29:08
debiancve
debiancve
CVE-2018-3719
2018-06-07 02:29:08
openvas
openvas
Fedora Update for nodejs-mixin-deep FEDORA-2018-ab62814cee
2018-05-31 00:00:00
ubuntucve
ubuntucve
CVE-2018-3719
2018-06-07 00:00:00
cve
cve
CVE-2018-3719
2018-06-07 02:29:08
prion
prion
Code injection
2018-06-07 02:29:00
cvelist
cvelist
CVE-2018-3719
2018-06-07 02:00:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (mixin-deep)
2018-02-01 00:21:10
