PT-2021-15536 · Npm · Json-Ptr

Alessio Della Libera · Published 2021-11-03 · Updated 2021-11-08 · CVE-2021-23509

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions json-ptr versions prior to 3.0.0

Description A type confusion issue can lead to a bypass when user-provided keys used in the pointer parameter are arrays. This issue is related to the json-ptr package.

Recommendations For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of array values for the pointer parameter until a patch is applied.

Exploit

Fix

Type Confusion

Prototype Pollution

Weakness Enumeration

CWE-843

CWE-1321

Related Identifiers

CVE-2021-23509

GHSA-8GWJ-8HXC-285W

SNYK-JAVA-ORGWEBJARSNPM-1767165

SNYK-JS-JSONPTR-1577291

Affected Products

Json-Ptr

References · 10

• 🔥 https://snyk.io/vuln/SNYK-JS-JSONPTR-1577291 · Exploit
• 🔥 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1767165 · Exploit
• https://github.com/flitbit/json-ptr/commit/5dc458fbad1c382a2e3ca6d62e66ede3d92849ca · Patch
• https://github.com/flitbit/json-ptr/pull/42 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-23509 · Security Note
• https://osv.dev/vulnerability/GHSA-8gwj-8hxc-285w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23509 · Vendor Advisory
• https://github.com/flitbit/json-ptr%23security-vulnerabilities-resolved · Note
• https://github.com/flitbit/json-ptr · Note
• https://t.me/cibsecurity/31758 · Telegram Post