Lucene search
SnykCVELIST:CVE-2020-28478HistoryJan 19, 2021 - 10:20 a.m.
CVE-2020-28478 Prototype Pollution
2021-01-1910:20:17
snyk
www.cve.org
3
cve-2020-28478
prototype pollution
gsap before 3.6.0
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
45.0%
This affects the package gsap before 3.6.0.
CNA Affected
[
{
"product": "gsap",
"vendor": "n/a",
"versions": [
{
"lessThan": "3.6.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
github
github
Prototype pollution in gsap
2021-01-20 21:21:50
nodejs
nodejs
Prototype Pollution
2021-02-19 22:36:50
osv
osv
Prototype pollution in gsap
2021-01-20 21:21:50
cve
cve
CVE-2020-28478
2021-01-19 11:15:13
prion
prion
Code injection
2021-01-19 11:15:00
veracode
veracode
Prototype Pollution
2021-01-20 08:34:08
nvd
nvd
CVE-2020-28478
2021-01-19 11:15:13
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
45.0%
Related for CVELIST:CVE-2020-28478