CVE-2023-3696

Summary

CVE-2023-3696 denotes a prototype pollution vulnerability discovered in the automattic/mongoose GitHub repository before version 7.3.4. This issue allows an attacker to inject malicious code during the instance creation process, potentially leading to unintended modifications of existing objects or creation of new ones with unauthorized access. The impact includes information disclosure, arbitrary code execution, or denial of service. Developers are advised to upgrade to the patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.