PT-2021-18252 · Mixme · Mixme

CVE-2021-29491

·

Published

2021-05-06

·

Updated

2022-03-14

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions: mixme version 0.5.0
Description: The issue allows an attacker to add or alter properties of an object via proto through the mutate() and merge() functions, potentially causing a denial of service (DoS) and putting the program's availability at risk.
Recommendations: For mixme version 0.5.0, update to version 0.5.1 or later to resolve the issue. As a temporary workaround, consider disabling the mutate() and merge() functions until a patch is available. Restrict access to the proto property to minimize the risk of exploitation.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2021-29491
GHSA-79JW-6WG7-R9G4

Affected Products

Mixme