CVE-2022-21213

 

Published at: - 17-06-2022 10:15

Last modified: - 28-06-2022 04:43

Total changes: - 5

Description

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively is not checked, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7792](https://security.snyk.io/vuln/SNYK-JS-MOUT-1014544).

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• N/A-Exploit, Third Party Advisory
• N/A-Exploit, Third Party Advisory
• N/A-Exploit, Third Party Advisory
• N/A-Exploit, Third Party Advisory
• N/A-Exploit, Third Party Advisory

 

Keywords

NVD

 

CVE-2022-21213

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures