Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ramda Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability - CVE-2021-42581 - Vulnerability Database
Ramda

Ramda Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability - CVE-2021-42581

Critical
Reference: CVE-2021-42581
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-42581
Title: Ramda Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
Overview:

DISPUTED Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property quot__proto__quot) as an argument to the function. NOTE: the vendor disputes this because the observed behavior only means that a user can create objects that the user didn39t know would contain custom prototypes.