Vulnerabilities > CVE-2019-10805 - Exposure of Resource to Wrong Sphere vulnerability in Sideralis Valib.Js 2.0.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is possible for a crafted payload to overwrite this function to manipulate the inspection results to bypass security checks.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |