CVE-2020-7638

Katalog CVE

CVSS 5.3 · Medium EPSS 1,0%

Kerentanan Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') pada confinit project confinit. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

Rincian

Terbit di NVD

6 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/davideicardi/confinit/commit/a34e06ca5c1c8b047ef112ef188b2fe30d2a1eab patch · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JS-CONFINIT-564433 exploit · advisory pihak ketiga