← Back

Kind Of Project

kind-of_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Kind Of
kind-of
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-20149
1Kind Of Project
1Kind Of
Nov 21, 2024
Dec 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwri...Show more
ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.Show less