CVE-2020-15256 Prototype pollution in object-path

🗓️ 19 Oct 2020 21:25:13Reported by GitHub_MType

Prototype pollution vulnerability in object-path set() metho

Reporter	Title	Published	Views	Family All 39
Huntr	Prototype Pollution in mariocasciaro/object-path	14 Sep 202000:00	–	huntr
IBM Security Bulletins	Security Bulletin: There is a vulnerablity in the object-path library affecting IBM watsonx Code Assistant IDE Extensions	8 Apr 202507:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
IBM Security Bulletins	Security Bulletin: Version 0.11.4 of Node.js module object-path included in IBM Netcool Operations Insight 1.6.2.x has a security vulnerability	15 Dec 202018:41	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities	1 Apr 202216:38	–	ibm
ATTACKERKB	CVE-2021-23434	27 Aug 202116:47	–	attackerkb
BDU FSTEC	The vulnerability of the set function in the object-path library of the Aurora Application Software Center, related to uncontrolled changes to prototype attributes of objects, allows attackers to execute a “prototype pollution” attack.	9 Jun 202100:00	–	bdu_fstec
Circl	CVE-2020-15256	20 Oct 202002:46	–	circl
CVE	CVE-2020-15256	19 Oct 202021:25	–	cve
Debian	[SECURITY] [DLA 3291-1] node-object-path security update	29 Jan 202316:18	–	debian

[
  {
    "product": "object-path",
    "vendor": "mariocasciaro",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.11.5"
      }
    ]
  }
]

Source	Link
github	www.github.com/mariocasciaro/object-path/security/advisories/GHSA-cwx2-736x-mf6w
github	www.github.com/mariocasciaro/object-path/commit/2be3354c6c46215c7635eb1b76d80f1319403c68

19 Oct 2020 21:25Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.7

EPSS0.01528