Vulnerabilities > CVE-2021-32736 - Unspecified vulnerability in Thinkjs Think-Helper

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

thinkjs

NVD

Published: 2021-06-30

Updated: 2022-07-22

Summary

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. The vulnerability is patched in version 1.1.3.

Vulnerable Configurations

Part	Description	Count
Application	Thinkjs Thinkjs Think Helper 1.0.2 Thinkjs Think Helper 1.0.3 Thinkjs Think Helper 1.0.4 Thinkjs Think Helper 1.0.5 Thinkjs Think Helper 1.0.6 Thinkjs Think Helper 1.0.7 Thinkjs Think Helper 1.0.8 Thinkjs Think Helper 1.0.9 Thinkjs Think Helper 1.0.10 Thinkjs Think Helper 1.0.11 Thinkjs Think Helper 1.0.12 Thinkjs Think Helper 1.0.13 Thinkjs Think Helper 1.0.14 Thinkjs Think Helper 1.0.15 Thinkjs Think Helper 1.0.16 Thinkjs Think Helper 1.0.17 Thinkjs Think Helper 1.0.18 Thinkjs Think Helper 1.0.20 Thinkjs Think Helper 1.0.22 Thinkjs Think Helper 1.0.23	20

References

https://github.com/thinkjs/think-helper/security/advisories/GHSA-vr5m-3h59-7jcp