CVE-2020-8116 in dot-prop

Sumário

de MITRE

Prototype pollution vulnerability in dot-prop npm package version 5.1.0 and earlier allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 28/01/2020
• Moderação: aceite
• Entrada: VDB-149684
• CPE: pronto
• CWE: CWE-471 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.03079
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8116
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8116
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8116/