Количество 2
Количество 2
CVE-2020-28441
больше 3 лет назад
This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context.
CVSS3: 7.3
EPSS: Низкий
GHSA-m6mg-jvjf-w44x
больше 3 лет назад
conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2
CVSS3: 9.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-28441 This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context. | CVSS3: 7.3 | 1% Низкий | больше 3 лет назад |
| GHSA-m6mg-jvjf-w44x conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2 | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу
20