CVE Daily

CVE-2021-20087

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Po...

High CVSS 8.8

Overview

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-deparam 0.5.1 allows a malicious user to inject properties into Object.prototype.

CWE: CWE-1321 Published: 2021-04-23T18:15:08.067
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.8 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags