Vulnerabilities > CVE-2023-26920 - Unspecified vulnerability in Naturalintelligence Fast XML Parser
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.
Vulnerable Configurations
References
- https://gist.github.com/Sudistark/a5a45bd0804d522a1392cb5023aa7ef7
- https://gist.github.com/Sudistark/a5a45bd0804d522a1392cb5023aa7ef7
- https://github.com/advisories/GHSA-793h-6f7r-6qvm
- https://github.com/advisories/GHSA-793h-6f7r-6qvm
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/2b032a4f799c63d83991e4f992f1c68e4dd05804
- https://github.com/NaturalIntelligence/fast-xml-parser/commit/2b032a4f799c63d83991e4f992f1c68e4dd05804