high7.5
CVE-2018-16472
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by a…
Impact
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cached-Path-Relative Project | Cached-Path-Relative | through 1.0.1 |
| Debian | Debian Linux | Version 10.0 |