CVEs-PoC/2021/CVE-2021-23807.md

CVE-2021-23807

Description

This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.

POC

Reference

• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910273
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910273
• https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577288
• https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577288

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ChamalBandara/CVEs
• https://github.com/dellalibera/dellalibera