01642 06 11 11 Arrange Call

Prototype Pollution Vulnerability in mishoo UglifyJS 3.13.2 via DEFNODE in ast.js

CVE-2022-37598 · CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-37598

Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid report.

Learn more about our Web Application Penetration Testing UK.