mootools-more vulnerable to prototype pollution

Description

Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.6.0

References

• GHSA-fw45-938v-p26j
• CVE-2021-20088
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• deep-defaults vulnerable to prototype pollution - CVE-2021-25944
• json-schema is vulnerable to Prototype Pollution - CVE-2021-3918
• Prototype Pollution in mootools - CVE-2021-23432
• dustjs-linkedin vulnerable to Prototype Pollution - CVE-2021-4264

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

mootools-more