medium5.6
CVE-2021-23328
Prototype Pollution in iniparserjs
Impact
This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | iniparserjs | <= 1.0.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iniparserjs Project | Iniparserjs | All versions |