PT-2023-20514
CVE-2023-26135
·
تاريخ النشر
2023-06-30
·
تاريخ التحديث
2024-02-07
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
flatnest versions all
Description
The issue concerns Prototype Pollution via the
nest() function in the flatnest/nest.js file. This affects all versions of the package flatnest.Recommendations
For all versions, consider disabling the
nest() function as a temporary workaround until a patch is available. Restrict access to the flatnest/nest.js file to minimize the risk of exploitation. Avoid using the nest() function in sensitive operations until the issue is resolved.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾