CVEs-PoC/2021/CVE-2021-23329.md

CVE-2021-23329

Description

The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.

POC

Reference

• https://github.com/Geta/NestedObjectAssign/pull/11
• https://github.com/Geta/NestedObjectAssign/pull/11
• https://snyk.io/vuln/SNYK-JS-NESTEDOBJECTASSIGN-1065977
• https://snyk.io/vuln/SNYK-JS-NESTEDOBJECTASSIGN-1065977

Github

No PoCs found on GitHub currently.