CVE-2019-10798

Katalog CVE

CVSS 5.3 · Medium EPSS 1,1%

Kerentanan pada rdf-graph-array project rdf-graph-array. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.prototype.add method could be tricked into adding or modifying properties of Object.prototype.

Rincian

Terbit di NVD

24 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://snyk.io/vuln/SNYK-JS-RDFGRAPHARRAY-551803 advisory pihak ketiga
• https://github.com/rdf-ext-archive/rdf-graph-array/blob/master/index.js#L211 exploit · tool signature