exploitDog

CVE-2020-28471

Опубликовано: 25 июл. 2022

Источник: nvd

CVSS3: 7.3

CVSS3: 9.8

EPSS Низкий

Описание

This affects the package properties-reader before 2.2.0.

Ссылки

https://github.com/steveukx/properties/commit/0877cc871db9865f58dd9389ce99e61be05380a5
Patch
Third Party Advisory
https://github.com/steveukx/properties/issues/40
Exploit
Issue Tracking
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JS-PROPERTIESREADER-1048968
Exploit
Third Party Advisory
https://github.com/steveukx/properties/commit/0877cc871db9865f58dd9389ce99e61be05380a5
Patch
Third Party Advisory
https://github.com/steveukx/properties/issues/40
Exploit
Issue Tracking
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JS-PROPERTIESREADER-1048968
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:properties-reader_project:properties-reader:*:*:*:*:*:node.js:*:*

Версия до 2.2.0 (исключая)

EPSS

Процентиль: 71%

0.00694

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-1321

Связанные уязвимости

GHSA-jxvf-m3x5-mxwq

CVSS3: 9.8

github

больше 3 лет назад

Properties-Reader before v2.2.0 vulnerable to prototype pollution

EPSS

Процентиль: 71%

0.00694

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-1321