high8.8
CVE-2019-10808
utilitify prior to 1.0.3 allows modification of object properties.
Impact
utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xcritical.Software | Utilitify | before 1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/xcritical-software/utilitify/commit/88d6e27009823338bf319ffb768fe6b08e8ad2d1%2C
- https://snyk.io/vuln/SNYK-JS-UTILITIFY-559497
- https://github.com/xcritical-software/utilitify/commit/88d6e27009823338bf319ffb768fe6b08e8ad2d1%2C
- https://snyk.io/vuln/SNYK-JS-UTILITIFY-559497