Lucene search
GoogleOSV:CVE-2020-7788HistoryDec 11, 2020 - 11:15 a.m.
CVE-2020-7788
2020-12-1111:15:11
Google
osv.dev
6
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0068)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2503-1)
2020-12-22 00:00:00
cve
cve
CVE-2020-7788
2020-12-11 11:15:11
nessus
nessus
Debian DLA-2503-1 : node-ini security update
2020-12-22 00:00:00
Oracle Linux 8 : nodejs:12 (ELSA-2021-0549)
2021-02-19 00:00:00
Rocky Linux 8 : nodejs:16 (RLSA-2021:5171)
2023-11-06 00:00:00
debian
debian
[SECURITY] [DLA 2503-1] node-ini security update
2020-12-21 15:01:05
nvd
nvd
CVE-2020-7788
2020-12-11 11:15:11
ibm
ibm
osv
osv
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
2020-12-10 16:53:45
node-ini - security update
2020-12-21 00:00:00
Moderate: nodejs:12 security update
2021-02-16 07:34:29
prion
prion
Code injection
2020-12-11 11:15:00
cvelist
cvelist
CVE-2020-7788 Prototype Pollution
2020-12-11 00:00:00
github
github
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
2020-12-10 16:53:45
mageia
mageia
Updated nodejs-ini package fixes a security vulnerability
2021-02-05 14:54:53
ubuntucve
ubuntucve
CVE-2020-7788
2020-12-11 00:00:00
redhatcve
redhatcve
CVE-2020-7788
2020-12-14 14:57:16
veracode
veracode
Prototype Pollution
2020-12-11 03:37:58
debiancve
debiancve
CVE-2020-7788
2020-12-11 11:15:11
oraclelinux
oraclelinux
nodejs:12 security update
2021-02-20 00:00:00
nodejs:16 security, bug fix, and enhancement update
2021-12-16 00:00:00
nodejs:14 security and bug fix update
2021-02-20 00:00:00
almalinux
almalinux
Moderate: nodejs:12 security update
2021-02-16 07:34:29
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:14 security and bug fix update
2021-02-16 07:34:42
redhat
redhat
(RHSA-2021:0551) Moderate: nodejs:14 security and bug fix update
2021-02-16 07:34:42
(RHSA-2021:0421) Moderate: rh-nodejs14-nodejs security update
2021-02-04 16:46:24
(RHSA-2021:0549) Moderate: nodejs:12 security update
2021-02-16 07:34:29
rocky
rocky
nodejs:12 security update
2021-02-16 07:34:29
nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
nodejs:14 security and bug fix update
2021-02-16 07:34:42