Back to search
CVE-2020-7616
Published: Apr 7, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the `Object.prototype`. Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed which will then be exported by `express-mock-middleware`. As such, this is considered to be a low risk.
| Vendor | Product | Versions |
|---|---|---|
n/a | express-mock-middleware | affected All versions including 0.0.6 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now