Skip to main content

Cached Path Relative

1 CVEs product

Monthly

CVE-2018-16472 Nov 06, 19:29 npm HIGH PATCH This Week

A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Debian Debian Linux Cached Path Relative
NVD
CVSS 3.1
7.5
EPSS
2.1%
EPSS 2% CVSS 7.5
HIGH PATCH This Week

A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Debian Debian Linux +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy