Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
bodymen 注入漏洞
Vulnerability Description
bodymen是一款适用于MongoDB、Express和Nodejs（MEN）的主体解析器中间件。 bodymen 1.1.1之前版本中存在安全漏洞。攻击者可借助‘handler’参数利用该漏洞添加或修改Object.prototype属性。
CVSS Information
N/A
Vulnerability Type
N/A