PT-2021-24398 · Npm · Mixme

Published 2021-09-20 · Updated 2021-09-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned.

Description: The issue allows a target object to access and modify certain properties of a source object when copying properties from the source to the target. This can lead to unauthorized modifications. The problem was addressed by implementing a more aggressive discovery of secured properties to filter out inaccessible content.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

GHSA-84P7-FH9C-6G8H

Affected Products

Mixme

References · 7

• https://osv.dev/vulnerability/GHSA-84p7-fh9c-6g8h · Vendor Advisory
• https://github.com/adaltas/node-mixme/issues/1 · Note
• https://github.com/adaltas/node-mixme · Note
• https://github.com/adaltas/node-mixme/commit/db70fe9bcbba451e9f8bd794a9fa7cdfa00125ad · Note
• https://github.com/adaltas/node-mixme/issues/2 · Note
• https://github.com/adaltas/node-mixme/security/advisories/GHSA-84p7-fh9c-6g8h · Note
• https://github.com/advisories/GHSA-79jw-6wg7-r9g4 · Note