CVE-2022-0432

Prototype Pollution in mastodon/mastodon

State
Published
Severity
7.4 High
Published
Feb 2, 2022
Updated
Aug 2, 2024
Reserved
Jan 31, 2022

Read the record on cve.org

Description

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.

Scores

CVSSScoreVectorSource
3.07.4 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N@huntrdev

Weaknesses

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected Products

ProductVersions
mastodon/mastodonmastodon
  • before 3.5.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.