Lucene search
PRIOn knowledge basePRION:CVE-2020-7788HistoryDec 11, 2020 - 11:15 a.m.
Code injection
2020-12-1111:15:00
PRIOn knowledge base
www.prio-n.com
8
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| ini | lt | 1.3.6 |
Related
osv
osv
CVE-2020-7788
2020-12-11 11:15:11
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
2020-12-10 16:53:45
node-ini - security update
2020-12-21 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0068)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2503-1)
2020-12-22 00:00:00
cve
cve
CVE-2020-7788
2020-12-11 11:15:11
debian
debian
[SECURITY] [DLA 2503-1] node-ini security update
2020-12-21 15:01:05
nessus
nessus
Debian DLA-2503-1 : node-ini security update
2020-12-22 00:00:00
Oracle Linux 8 : nodejs:12 (ELSA-2021-0549)
2021-02-19 00:00:00
Rocky Linux 8 : nodejs:16 (RLSA-2021:5171)
2023-11-06 00:00:00
nvd
nvd
CVE-2020-7788
2020-12-11 11:15:11
ibm
ibm
cvelist
cvelist
CVE-2020-7788 Prototype Pollution
2020-12-11 00:00:00
github
github
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
2020-12-10 16:53:45
ubuntucve
ubuntucve
CVE-2020-7788
2020-12-11 00:00:00
mageia
mageia
Updated nodejs-ini package fixes a security vulnerability
2021-02-05 14:54:53
redhatcve
redhatcve
CVE-2020-7788
2020-12-14 14:57:16
veracode
veracode
Prototype Pollution
2020-12-11 03:37:58
debiancve
debiancve
CVE-2020-7788
2020-12-11 11:15:11
oraclelinux
oraclelinux
nodejs:12 security update
2021-02-20 00:00:00
nodejs:16 security, bug fix, and enhancement update
2021-12-16 00:00:00
nodejs:14 security and bug fix update
2021-02-20 00:00:00
almalinux
almalinux
Moderate: nodejs:12 security update
2021-02-16 07:34:29
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:14 security and bug fix update
2021-02-16 07:34:42
redhat
redhat
(RHSA-2021:0421) Moderate: rh-nodejs14-nodejs security update
2021-02-04 16:46:24
(RHSA-2021:0551) Moderate: nodejs:14 security and bug fix update
2021-02-16 07:34:42
(RHSA-2021:0549) Moderate: nodejs:12 security update
2021-02-16 07:34:29
rocky
rocky
nodejs:12 security update
2021-02-16 07:34:29
nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
nodejs:14 security and bug fix update
2021-02-16 07:34:42