PT-2022-11597 · Unknown · Chbrown Rfc6902

Arjunshibu · Published 2022-12-15 · Updated 2024-01-25 · CVE-2021-4245

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions chbrown rfc6902 (affected versions not specified)

Description A problematic vulnerability has been found in chbrown rfc6902, affecting an unknown part of the file pointer.ts. The manipulation leads to improperly controlled modification of object prototype attributes, known as 'prototype pollution'. The exploit has been disclosed to the public and may be used.

Recommendations To fix this issue, it is recommended to apply a patch, specifically the one with the name c006ce9faa43d31edb34924f1df7b79c137096cf.

Exploit

Fix

Special Elements Injection

Prototype Pollution

Weakness Enumeration

CWE-74

CWE-1321

Related Identifiers

CVE-2021-4245

GHSA-P495-JXH2-WRFG

Affected Products

Chbrown Rfc6902

References · 10

• 🔥 https://github.com/chbrown/rfc6902/pull/76 · Exploit
• https://github.com/chbrown/rfc6902/commit/c006ce9faa43d31edb34924f1df7b79c137096cf · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-4245 · Security Note
• https://osv.dev/vulnerability/GHSA-p495-jxh2-wrfg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-4245 · Vendor Advisory
• https://github.com/chbrown/rfc6902 · Note
• https://github.com/chbrown/rfc6902/issues/84 · Note
• https://t.me/cvenotify/39995 · Telegram Post
• https://vuldb.com/?id.215883 · Note
• https://t.me/cvenotify/40245 · Telegram Post