TI-2023-00798 CVE-2023-0842 · GHSA-776f-qx25-q3cc
xml2js 0.4.23 - Prototype Pollution
Priority MEDIUM 63
xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object.
Xml2js Project
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Xml2js Project records in CISA KEVNo Xml2js Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record