CVE-2019-20149

🗓️ 13 May 2021 05:51:53Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 154 Views

Flaw in nodejs-kind-of allows overwrite of internal attributes via conflicting nam

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	1 Aug 202314:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM QRadar Use Case Manager app	2 Dec 202514:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Engineering products.	29 Mar 202121:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: OSS security Scan issues for Concerto installer.	8 Dec 202006:37	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Security issues for NPS console.	15 Dec 202007:03	–	ibm
IBM Security Bulletins	Security Bulletin: OSS scan fixes for Content pos	15 Dec 202006:58	–	ibm
Tenable Nessus	Azure Linux 3.0 Security Update: js-jquery (CVE-2019-20149)	10 Feb 202500:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-20149
snyk	www.snyk.io/vuln/SNYK-JS-KINDOF-537849
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

26 Mar 2024 00:33Current

3.1Low risk

Vulners AI Score3.1

CVSS 25

CVSS 3.15.9 - 7.5

EPSS0.00214

nodejs-kind-of internal attributes type detection manipulation