CVE-2020-7743

Опубликовано: 07 окт. 2020

Источник: redhat

CVSS3: 7.3

Описание

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Ansible Tower 3	mathjs	Out of support scope
Red Hat Ansible Tower 3.7 for RHEL 7	ansible-tower-37/ansible-tower-rhel7	Fixed	RHSA-2020:5249	30.11.2020

Показывать по

Статус:

Moderate

Дефект:

CWE-400

https://bugzilla.redhat.com/show_bug.cgi?id=1887999mathjs: prototype pollution via the deepExtend function that runs upon configuration updates

7.3 High

CVSS3

CVE-2020-7743

CVSS3: 7.3

nvd

больше 5 лет назад

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

GHSA-x2fc-mxcx-w4mf

CVSS3: 7.3

github

больше 4 лет назад

Prototype Pollution in mathjs

7.3 High

CVSS3