CVE-2020-7706

Katalog CVE

CVSS 9.8 · Critical EPSS 2,8%

Kerentanan Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') pada connie-lang project connie-lang. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie.

Rincian

Terbit di NVD

18 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

EPSS (30 hari)

2,8% peluang dieksploitasi; lebih tinggi dari 86,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/mattinsler/connie-lang/commit/ef376d404c712dd28309ba07f28a8f87f24a015a patch · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JS-CONNIELANG-598853 exploit · advisory pihak ketiga