← CVE Intelligence

CVE-2018-16492

HackerOne / extend PUBLISHED

Description (CNA)

A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.

Affected (CNA)

Vendor / productVersions
HackerOne / extendaffected < 2.0.2, ~<3.0.2

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.