CVEs-PoC/2018/CVE-2018-16489.md

CVE-2018-16489

Description

A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions.

POC

Reference

• https://hackerone.com/reports/430291

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ossf-cve-benchmark/CVE-2018-16489