CVE-2021-20085 — n/a / backbone-query-parameters

CVE-2021-20085

n/a / backbone-query-parameters PUBLISHED

Description (CNA)

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype.

Affected (CNA)

Vendor / product	Versions
n/a / backbone-query-parameters	affected 0.4.0

CWE

No CWE identifiers supplied.

References

https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/backbone-qp.md

ADP enrichment

CVE

No English description supplied.

https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/backbone-qp.md