Description

Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4.

Remediation

References

https://github.com/automattic/mongoose/commit/305ce4ff789261df7e3f6e72363d0703e025f80d

https://huntr.dev/bounties/1eef5a72-f6ab-4f61-b31d-fc66f5b4b467

Related Vulnerabilities

CVE-2023-45134 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates

CVE-2017-12648 Vulnerability in maven package com.liferay:com.liferay.frontend.taglib

CVE-2020-10693 Vulnerability in maven package org.hibernate.validator:hibernate-validator

CVE-2019-12395 Vulnerability in maven package us.dynmap:dynmap

CVE-2021-41580 Vulnerability in npm package passport-oauth2

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Exploit NVD-CWE-noinfo