Vulnerabilities > CVE-2021-23771

CVSS 6.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

argencoders-notevil-project

notevil-project

NVD

Published: 2022-03-17

Updated: 2022-03-24

Summary

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. **Note:** This vulnerability derives from an incomplete fix in [SNYK-JS-NOTEVIL-608878](https://security.snyk.io/vuln/SNYK-JS-NOTEVIL-608878).

Vulnerable Configurations

Part	Description	Count
Application	Argencoders-Notevil_Project Argencoders Notevil Project Argencoders Notevil 2.0.0 Argencoders Notevil Project Argencoders Notevil 2.0.2 Argencoders Notevil Project Argencoders Notevil 2.0.3 Argencoders Notevil Project Argencoders Notevil 2.0.4 Argencoders Notevil Project Argencoders Notevil 2.0.5 Argencoders Notevil Project Argencoders Notevil 2.1.0 Argencoders Notevil Project Argencoders Notevil 2.1.1 Argencoders Notevil Project Argencoders Notevil 2.1.2 Argencoders Notevil Project Argencoders Notevil 2.2.1 Argencoders Notevil Project Argencoders Notevil 2.2.2 Argencoders Notevil Project Argencoders Notevil 2.2.3 Argencoders Notevil Project Argencoders Notevil 2.2.4 Argencoders Notevil Project Argencoders Notevil 2.2.6 Argencoders Notevil Project Argencoders Notevil 2.3.0 Argencoders Notevil Project Argencoders Notevil 2.3.1 Argencoders Notevil Project Argencoders Notevil 2.4.0 Argencoders Notevil Project Argencoders Notevil 2.5.0	17
Application	Notevil_Project Notevil Project Notevil 0.0.0 Notevil Project Notevil 0.0.1 Notevil Project Notevil 0.0.2 Notevil Project Notevil 0.1.0 Notevil Project Notevil 0.2.0 Notevil Project Notevil 0.3.0 Notevil Project Notevil 0.4.0 Notevil Project Notevil 0.5.0 Notevil Project Notevil 0.6.0 Notevil Project Notevil 0.7.0 Notevil Project Notevil 0.8.0 Notevil Project Notevil 0.8.1 Notevil Project Notevil 1.0.0 Notevil Project Notevil 1.1.0 Notevil Project Notevil 1.2.0 Notevil Project Notevil 1.3.0 Notevil Project Notevil 1.3.1 Notevil Project Notevil 1.3.2 Notevil Project Notevil 1.3.3	19

Vulnerabilities > CVE-2021-23771 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-23771"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2021-23771