CVE Catalog
CVE-2021-23450
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk30.37%
98th percentile - higher than 98% of all known CVEs
Summary
All versions of the dojo package are vulnerable to Prototype Pollution via the setObject function.
Risk Assessment
Prototype pollution can lead to unpredictable application behavior and, in some cases, code execution or bypassing security mechanisms.
Recommendation
Upgrade the dojo package to a version that fixes this vulnerability, or avoid using the setObject function with untrusted data.
Other vulnerabilities in dojo
Original NVD description (English source)
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS