Description

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

Remediation

References

https://github.com/gulpjs/copy-props/pull/7

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1088047

https://snyk.io/vuln/SNYK-JS-COPYPROPS-1082870

Related Vulnerabilities

CVE-2022-21700 Vulnerability in maven package io.micronaut:micronaut-http

CVE-2023-46243 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore

CVE-2022-26594 Vulnerability in maven package com.liferay:com.liferay.dynamic.data.mapping.form.field.type

CVE-2023-28155 Vulnerability in maven package org.webjars:request

CVE-2023-29511 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Third Party Advisory Exploit NVD-CWE-Other