Test ID:	1.3.6.1.4.1.25623.1.0.126477
Category:	Web Servers
Title:	Mongoose Web Server < 7.3.4 Prototype Pollution Vulnerability
Summary:	Mongoose Web Server is prone to a prototype pollution; vulnerability.
Description:	Summary: Mongoose Web Server is prone to a prototype pollution vulnerability. Vulnerability Insight: If an attacker has some way to control an object on the Mongo server through one way or another, it is possible to cause prototype pollution on any Mongoose client. Notably, if a poorly implemented service allows a user to control the object in findByIdAndUpdate and similar functions, this bug could be triggered through the $rename operator. Affected Software/OS: Mongoose Web Server prior to version 7.3.4. Solution: Update to version 7.3.4 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-3696 https://github.com/automattic/mongoose/commit/305ce4ff789261df7e3f6e72363d0703e025f80d https://huntr.dev/bounties/1eef5a72-f6ab-4f61-b31d-fc66f5b4b467
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.