CVE-2018-3750

Source

https://nvd.nist.gov/vuln/detail/CVE-2018-3750

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-3750.json

Aliases

• GHSA-hr2v-3952-633q

Related

• RLSA-2021:0549

Published

2018-07-03T21:29:00Z

Modified

2024-05-14T06:27:09.197804Z

Summary

[none]

Details

The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects.

References

• https://hackerone.com/reports/311333