CVE-2020-7638

2020-04-0612:38:22

snyk

www.cve.org

0.001 Low

EPSS

Percentile

38.8%

JSON

confinit through 0.3.0 is vulnerable to Prototype Pollution.The ‘setDeepProperty’ function could be tricked into adding or modifying properties of ‘Object.prototype’ using a ‘proto’ payload.

CNA Affected

[
  {
    "product": "confinit",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions below 0.4.0"
      }
    ]
  }
]