En resumen
- CVE-2021-23433 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a algoliasearch-helper (algolia), algoliasearch-helper.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 80.3% de las vulnerabilidades.
- Solución: actualizar a 3.6.2 o posterior.
Description
The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the implementation allows users to define arbitrary search patterns.
NVD description
The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the implementation allows users to define arbitrary search patterns.
Más vulnerabilidades de algoliasearch-helper
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free