HIGH🇵🇱 Wersja polska

CVE-2020-8116

CVSS 7.3v3.1pub. 2020-02-04upd. 2024-11-21

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Dot Prop Project Dot Prop

    APP
    Dot-Prop Project
    < 4.2.15.0.0 – 5.1.1 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References