Search/CVE-2021-4264
● CVE — Medium

CVE-2021-4264

VendorlinkedinProductdustjsDiscoveredDec 21, 2022UpdatedNov 21, 2024

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.0 is able to address this issue. The name of the patch is ddb6523832465d38c9d80189e9de60519ac307c3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216464.

CVSS v3.1
6.3 MEDIUM
EPSS
1.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.08pp
1.07% → 1.15% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Dec 21, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024