CVE-2021-23509

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

This affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used in the pointer parameter are arrays.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

Vendor	Product	Versions
n/a	json-ptr	>= unspecified, < 3.0.0

References

https://github.com/flitbit/json-ptr%23security-vulnerabilities-resolvedBroken Link, Third Party Advisory
https://github.com/flitbit/json-ptr/commit/5dc458fbad1c382a2e3ca6d62e66ede3d92849caPatch, Third Party Advisory
https://github.com/flitbit/json-ptr/pull/42Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1767165Exploit, Mitigation, Patch, Third Party Advisory, VDB Entry
https://snyk.io/vuln/SNYK-JS-JSONPTR-1577291Exploit, Mitigation, Patch, Third Party Advisory, VDB Entry
https://github.com/flitbit/json-ptr%23security-vulnerabilities-resolvedBroken Link, Third Party Advisory
https://github.com/flitbit/json-ptr/commit/5dc458fbad1c382a2e3ca6d62e66ede3d92849caPatch, Third Party Advisory
https://github.com/flitbit/json-ptr/pull/42Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1767165Exploit, Mitigation, Patch, Third Party Advisory, VDB Entry
https://snyk.io/vuln/SNYK-JS-JSONPTR-1577291Exploit, Mitigation, Patch, Third Party Advisory, VDB Entry

Timeline

Published: Nov 3, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-23518.3Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2 CVE-2021-235147.5This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server.CVE-2021-235189.8The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Obje CVE-2021-23524.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.25 and prio CVE-2021-235209.8The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncom CVE-2021-235217.8This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry CVE-2021-23534.4Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected a CVE-2021-23544.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 8.0.25 an CVE-2021-235439.8All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.CVE-2021-23559.1Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are CVE-2021-235559.8The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during gen CVE-2021-235568.0The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_com