CVE-2025-57347

{"id": "CVE-2025-57347", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-57347", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-09-26T17:45:35.202617Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-09-24T19:15:39.980", "references": [{"url": "https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57347", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/tbo47/dagre-es/issues/52", "tags": ["Issue Tracking"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-1321"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, which fails to properly sanitize user-supplied input during property assignment operations. This flaw allows attackers to exploit prototype pollution vulnerabilities by injecting malicious input values (e.g., \"__proto__\"), enabling unauthorized modification of the JavaScript Object prototype chain. Successful exploitation could lead to denial of service conditions, unexpected application behavior, or potential execution of arbitrary code in contexts where polluted properties are later accessed or executed. The issue affects versions prior to 7.0.11 and remains unpatched at the time of disclosure."}, {"lang": "es", "value": "Existe una vulnerabilidad en el paquete Node.js 'dagre-d3-es' versi\u00f3n 7.0.9, espec\u00edficamente dentro de la funci\u00f3n addConflict del m\u00f3dulo 'bk', que no logra sanear adecuadamente la entrada proporcionada por el usuario durante las operaciones de asignaci\u00f3n de propiedades. Esta falla permite a los atacantes explotar vulnerabilidades de contaminaci\u00f3n de prototipos inyectando valores de entrada maliciosos (por ejemplo, '__proto__'), lo que permite la modificaci\u00f3n no autorizada de la cadena de prototipos del objeto JavaScript. La explotaci\u00f3n exitosa podr\u00eda conducir a condiciones de denegaci\u00f3n de servicio, comportamiento inesperado de la aplicaci\u00f3n o la ejecuci\u00f3n potencial de c\u00f3digo arbitrario en contextos donde las propiedades contaminadas son posteriormente accedidas o ejecutadas. El problema afecta a las versiones anteriores a la 7.0.11 y permanece sin parchear en el momento de la divulgaci\u00f3n."}], "lastModified": "2026-06-17T09:43:02.943", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tbo47:dagre-d3-es:7.0.9:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "02568D72-B787-4629-9EDF-633700A0117C"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}