Files
CVEs-PoC/2022/CVE-2022-25354.md
T
2024-05-25 21:48:12 +02:00

782 B

CVE-2022-25354

Description

The package set-in before 2.0.3 are vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-28273

POC

Reference

Github

No PoCs found on GitHub currently.