Prototype Pollution

This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i]) !== -1 returns -1 if parts[i] is ['__proto__']. This is because the method that has been called if the input is an array is Array.prototype.indexOf() and not String.prototype.indexOf(). They behave differently depending on the type of the input.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

N/A

mpath module 安全漏洞

mpath module是一款使用类似MongoDB的路径表示法获取/设置javascript对象值的模块。 mpath module 0.8.4 之前存在安全漏洞，该漏洞源于类型混淆，如果输入是数组，则调用的方法是 Array.prototype.indexOf() 而不是 String.prototype.indexOf()。

N/A

N/A