Description
All versions of phpjs up to and including 1.3.2 are vulnerable to Prototype Pollution via parse_str. phpjs is no longer maintained and users are advised to use Locutus as a replacement (https://github.com/locutusjs/locutus)
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.3.2
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in phpjs and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype Pollution in lodash - lodash.set - CVE-2020-8203
- Prototype pollution vulnerability in 'deep-set - CVE-2020-28276
- TypeORM vulnerable to MAID and Prototype Pollution - CVE-2020-8158
- Prototype pollution in gsap - CVE-2020-28478
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023