CVE-2021-20088

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mootools:mootools-more:1.6.0:*:*:*:*:*:*:*

History

21 Nov 2024, 05:45

Type Values Removed Values Added
References () https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/mootools-more.md - Exploit, Third Party Advisory () https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/mootools-more.md - Exploit, Third Party Advisory

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-1321

Information

Published : 2021-04-23 18:15

Updated : 2024-11-21 05:45


NVD link : CVE-2021-20088

Mitre link : CVE-2021-20088

CVE.ORG link : CVE-2021-20088


JSON object : View

Products Affected

mootools

  • mootools-more
CWE
CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')