Lucene search
SnykCVELIST:CVE-2020-28480HistoryJan 19, 2021 - 12:00 a.m.
CVE-2020-28480 Prototype Pollution
2021-01-1900:00:00
snyk
raw.githubusercontent.com
The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object’s key and set the value is not properly sanitized, leading to a Prototype Pollution.
Related
prion
prion
Path traversal
2021-01-19 15:15:00
Type confusion
2021-09-21 17:15:00
cve
cve
CVE-2020-28480
2021-01-19 15:15:11
CVE-2021-23444
2021-09-21 17:15:00
huntr
huntr
Prototype Pollution in clientio/joint
2021-09-05 06:40:24
osv
osv
CVE-2020-28480
2021-01-19 15:15:11
Prototype pollution in JointJS
2021-01-20 21:21:16
Prototype Pollution in jointjs
2021-09-22 20:36:34
nodejs
nodejs
Prototype Pollution
2021-02-19 19:44:46
veracode
veracode
Prototype Pollution
2021-01-20 03:22:06
github
github
Prototype pollution in JointJS
2021-01-20 21:21:16
Prototype Pollution in jointjs
2021-09-22 20:36:34
cvelist
cvelist
CVE-2021-23444 Prototype Pollution
2021-09-21 00:00:00