Object Property Modification Vulnerability in Utilitify Prior to 1.0.3

CVE-2019-10808 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

Learn more about our Web Application Penetration Testing UK.