Lucene search
SnykCVELIST:CVE-2020-7706HistoryAug 18, 2020 - 9:20 a.m.
CVE-2020-7706 Prototype Pollution
2020-08-1809:20:12
snyk
www.cve.org
1
cve-2020-7706
prototype pollution
configuration language library
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
AI Score
9.5
Confidence
High
EPSS
0.004
Percentile
74.8%
The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie.
CNA Affected
[
{
"product": "connie-lang",
"vendor": "n/a",
"versions": [
{
"lessThan": "0.1.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
osv
osv
Prototype Pollution in connie-lang
2021-05-06 17:29:25
CVE-2020-7706
2020-08-18 10:15:13
github
github
Prototype Pollution in connie-lang
2021-05-06 17:29:25
nvd
nvd
CVE-2020-7706
2020-08-18 10:15:13
cve
cve
CVE-2020-7706
2020-08-18 10:15:13
veracode
veracode
Prototype Pollution
2020-08-19 04:30:31
prion
prion
Code injection
2020-08-18 10:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
AI Score
9.5
Confidence
High
EPSS
0.004
Percentile
74.8%
Related for CVELIST:CVE-2020-7706