json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
References
Configurations
History
16 Oct 2025, 15:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Open-federation
Open-federation json-schema-editor-visual |
|
| References | () https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/json-schema-editor-visual%401.1.1/index.js - Broken Link | |
| References | () https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57320 - Third Party Advisory | |
| CPE | cpe:2.3:a:open-federation:json-schema-editor-visual:*:*:*:*:*:node.js:*:* |
25 Sep 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1321 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
24 Sep 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-24 21:15
Updated : 2025-10-16 15:48
NVD link : CVE-2025-57320
Mitre link : CVE-2025-57320
CVE.ORG link : CVE-2025-57320
JSON object : View
Products Affected
open-federation
- json-schema-editor-visual
CWE
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')