Description (CNA)
A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| rexrainbow / phaser3-rex-notes | affected 1.80.0; affected 1.80.1; affected 1.80.2; affected 1.80.3; affected 1.80.4; affected 1.80.5; affected 1.80.6; affected 1.80.7; affected 1.80.8; affected 1.80.9; affected 1.80.10; affected 1.80.11; affected 1.80.12; affected 1.80.13; affected 1.80.14; affected 1.80.15; affected 1.80.16; affected 1.80.17 |
CWE
CWE-1321, CWE-94
References
- https://vuldb.com/vuln/394563
- https://vuldb.com/vuln/394563/cti
- https://vuldb.com/cve/CVE-2026-78179
- https://vuldb.com/submit/884183
- https://github.com/rexrainbow/phaser3-rex-notes/issues/572
- https://github.com/rexrainbow/phaser3-rex-notes/
ADP enrichment
No English description supplied.
No references supplied.