Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2021-23328

Prototype Pollution

Description

This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a iniparserjs

  • 0 to < unspecifiedaffected

References