漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
kind-of 注入漏洞
Vulnerability Description
kind-of是一款JavaScript类型检查软件包。 kind-of v6.0.2版本中的index.js文件的‘ctorName’函数存在安全漏洞。攻击者可利用该漏洞覆盖内部属性,操纵类型检查的结果。
CVSS Information
N/A
Vulnerability Type
N/A