CVE-2021-44906
CRITICALMinimist <=1.2.5 - Prototype Pollution via setKey Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-44906. PoCs published by nevermoe.
AI-analyzed exploit summary This PoC demonstrates a prototype pollution vulnerability in the minimist library (CVE-2021-44906), where the `Function.prototype` is polluted via the `constructor` property, bypassing previous fixes. The exploit modifies the `done` property of all functions, affecting their behavior.
Description
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
Exploits (1)
This PoC demonstrates a prototype pollution vulnerability in the minimist library (CVE-2021-44906), where the `Function.prototype` is polluted via the `constructor` property, bypassing previous fixes. The exploit modifies the `done` property of all functions, affecting their behavior.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H