vendor:
N/A
by:
Anonymous
8.8
CVSS
HIGH
Type Confusion
843
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: JavaScript
2020
Type Confusion in JavaScript
This vulnerability occurs when the type of the 'this' object is assumed to be an object, but it can be other objects like an array. This can lead to operations on 'this' not being checked properly, which can lead to type confusion. The PoC code shows how this vulnerability can be exploited by calling the opt() function with an array as the 'this' object.
Mitigation:
Ensure that the type of the 'this' object is properly checked before performing any operations on it.