Vulnerability Details CVE-2021-25952
Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://github.com/angus-c/just/commit/dd57a476f4bb9d78c6f60741898dc04c71d2eb53
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25952
- https://github.com/angus-c/just/commit/dd57a476f4bb9d78c6f60741898dc04c71d2eb53
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25952
Products affected by CVE-2021-25952
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.0.0
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.1.0
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.1.1
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.1.2
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.1.3
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.1.4
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.1.5
-
cpe:2.3:a:just-safe-set_project:just-safe-set:1.1.6
-
cpe:2.3:a:just-safe-set_project:just-safe-set:2.0.0
-
cpe:2.3:a:just-safe-set_project:just-safe-set:2.0.1
-
cpe:2.3:a:just-safe-set_project:just-safe-set:2.1.0
-
cpe:2.3:a:just-safe-set_project:just-safe-set:2.2.0
-
cpe:2.3:a:just-safe-set_project:just-safe-set:2.2.1