要点
- CVE-2018-16472 是影响 cached-path-relative (cached-path-relative project), cached-path-relative 的高危 (CVSS 7.5)漏洞。
- 未来 30 天内被利用的概率（EPSS）：2.1%，高于 82.2% 的漏洞。
- 修复：升级到 1.0.2 或更高版本。
Description
Version of cached-path-relative before 1.0.2 are vulnerable to prototype pollution.
Recommendation
Update to version 1.0.2 or later.
NVD description
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.
cached-path-relative 的其他漏洞
查看全部 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free