mootools-more vulnerable to prototype pollution

ALTO 8.8CVE-2021-20088 · GHSA-fw45-938v-p26j · Published 23/04/2021 · updated 17/06/2026

In breve

CVE-2021-20088 è una vulnerabilità ALTO (CVSS 8.8) che riguarda mootools-more (mootools), mootools-more.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 73.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mootools-more mootools	`= 1.6.0`	No fix yet
mootools-more npm	`≤ 1.6.0`	No fix yet

Description

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.

NVD description

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.

References

nvd.nist.gov/vuln/detail/CVE-2021-20088 · ADVISORY
BlackFan/client-side-prototype-pollution · WEB
mootools/mootools-more · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free