关于 CVE-2023-45827 的漏洞信息

1. 漏洞描述
From NVD
Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` function which can leads to remote code execution (RCE). This issue has been addressed in commit `98daf567` which has been included in release 1.0.2. Users are advised to upgrade. There are no known workarounds to this vulnerability.
From 神龙GPT (AIGC)
神龙GPT 暂无描述信息(请耐心等待)
2. 漏洞评分(CVSS)
From NVD
NVD 暂无评分
From 神龙GPT (AIGC)
神龙GPT暂无评分(请耐心等待)
3. 漏洞类别
From NVD
CWE-1321
From 神龙GPT (AIGC)
神龙GPT 暂无漏洞类别信息(请耐心等待)
Reference