CVE-2018-3719: Input Validation
Published Jun 7, 2018
·Updated
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property that will exist on all objects.
Affected Software
1 affected component
Mixin-deep Project Mixin-deep Node.js<1.3.1
Remediation
Event History
Jun 7, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of mixin-deep node module?
The vulnerability ID of mixin-deep node module is CVE-2018-3719.
2
What is the severity of CVE-2018-3719?
CVE-2018-3719 has a severity of 8.8 (high).
3
Which version of mixin-deep node module is affected by CVE-2018-3719?
Mixin-deep node module before version 1.3.1 is affected by CVE-2018-3719.
4
What is the impact of CVE-2018-3719?
CVE-2018-3719 allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
5
How can I fix CVE-2018-3719?
To fix CVE-2018-3719, upgrade mixin-deep node module to version 1.3.1 or later.