jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-04-19T00:00:00
Updated: 2024-08-04T22:48:09.199Z
Reserved: 2019-04-19T00:00:00
Link: CVE-2019-11358
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-04-20T00:29:00.247
Modified: 2024-02-16T16:32:51.227
Link: CVE-2019-11358
Redhat