Lucene search
K

CVE-2020-8147

🗓️ 03 Apr 2020 20:52:38Reported by hackeroneType 
cvelist
 cvelist
🔗 www.cve.org👁 16 Views

Flaw in input validation in npm package may allow prototype pollution attack leading to remote code execution or denial of servic

Related
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The vulnerability of theutils-extend module in the NPM package manager allows a hacker to execute arbitrary code.
26 Jun 202000:00
bdu_fstec
Circl
CVE-2020-8147
24 Sep 202006:45
circl
CNVD
npm package utils-extend input validation error vulnerability
7 Apr 202000:00
cnvd
CVE
CVE-2020-8147
3 Apr 202020:52
cve
EUVD
EUVD-2020-0822
7 Oct 202500:30
euvd
Github Security Blog
Prototype Pollution
3 Sep 202015:51
github
Hacker One
Node.js third-party modules: [utils-extend] Prototype pollution
21 Feb 202007:35
hackerone
Node.js
Prototype Pollution
6 Apr 202018:13
nodejs
NVD
CVE-2020-8147
3 Apr 202021:15
nvd
OSV
CVE-2020-8147
3 Apr 202021:15
osv
Rows per page
[
  {
    "product": "utils-extend",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "version 1.0.8 and earlier"
      },
      {
        "status": "affected",
        "version": "Not Fixed"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Apr 2020 20:52Current
9.8High risk
Vulners AI Score9.8
EPSS0.01115
16