Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Lodash Vulnerability - CVE-2018-3721 - Vulnerability Database
Lodash

Lodash Vulnerability - CVE-2018-3721

Medium
Reference: CVE-2018-3721
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-3721
Title: Lodash Vulnerability
Overview:

lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep merge and mergeWith functions which allows a malicious user to modify the prototype of quotObjectquot via __proto__ causing the addition or modification of an existing property that will exist on all objects.