CVE-2020-28271

Katalog CVE

CVSS 9.8 · Critical EPSS 3,4%

Kerentanan Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') pada sharpred deephas. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.

Rincian

Terbit di NVD

12 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

EPSS (30 hari)

3,4% peluang dieksploitasi; lebih tinggi dari 88,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/sharpred/deepHas/commit/2fe011713a6178c50f7deb6f039a8e5435981e20 patch · advisory pihak ketiga
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271 exploit · advisory pihak ketiga