CyberRota Analysis
AI-GeneratedA vulnerability in the antv layout library version 2.0.0 affects the setNestedValue function, allowing remote attackers to manipulate the argument path and improperly modify object prototype attributes. This could lead to unauthorized changes in application behavior or data integrity. Developers and organizations utilizing this library should prioritize patching or mitigating this issue to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.