valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is possible for a crafted payload to overwrite this function to manipulate the inspection results to bypass security checks.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2020-02-28T20:23:49
Updated: 2024-08-04T22:32:02.056Z
Reserved: 2019-04-03T00:00:00
Link: CVE-2019-10805
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-02-28T21:15:13.180
Modified: 2024-11-21T04:19:57.310
Link: CVE-2019-10805
Redhat
No data.