This affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr/classes/_src_pointer_.jsonpointer.htmlset) when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the key being set, leading to a prototype pollution.
References
| Link | Resource |
|---|---|
| https://github.com/flitbit/json-ptr/blob/master/src/util.ts%23L174 | Broken Link |
| https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038396 | Exploit Third Party Advisory |
| https://snyk.io/vuln/SNYK-JS-JSONPTR-1016939 | Exploit Third Party Advisory |
| https://github.com/flitbit/json-ptr/blob/master/src/util.ts%23L174 | Broken Link |
| https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038396 | Exploit Third Party Advisory |
| https://snyk.io/vuln/SNYK-JS-JSONPTR-1016939 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:37
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 7.3 |
| References | () https://github.com/flitbit/json-ptr/blob/master/src/util.ts%23L174 - Broken Link | |
| References | () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038396 - Exploit, Third Party Advisory | |
| References | () https://snyk.io/vuln/SNYK-JS-JSONPTR-1016939 - Exploit, Third Party Advisory |
Information
Published : 2020-11-10 16:15
Updated : 2024-11-21 05:37
NVD link : CVE-2020-7766
Mitre link : CVE-2020-7766
CVE.ORG link : CVE-2020-7766
JSON object : View
Products Affected
json-ptr_project
- json-ptr
CWE
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')