CVE-2021-23543 - All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attac

CVE-2021-23543

Summary

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

References

Vulnerable Configurations

cpe:2.3:a:agoric:realms-shim:*:*:*:*:*:node.js:*:*
cpe:2.3:a:agoric:realms-shim:*:*:*:*:*:node.js:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

Last major update

13-01-2022 - 18:39

Published

10-01-2022 - 14:10

Last modified

13-01-2022 - 18:39