Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2020-7746
HistoryJun 14, 2022 - 4:29 p.m.

CVE-2020-7746

2022-06-1416:29:19
redhat.com
access.redhat.com
157

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%

JSON

A flaw was found in chart.js. This issue occurs when the options parameter is not properly sanitized when it is processed. When options are processed, the object’s keys that are being set are not checked, possibly allowing a prototype pollution.

Related

debiancve 1
nodejs 1
osv 2
ibm 4
ubuntucve 1
cve 1
prion 1
veracode 1
github 1
nessus 1
ics 1
redhat 1
debiancve
debiancve
CVE-2020-7746
2020-10-29 08:15:00
nodejs
nodejs
Prototype pollution in chart.js
2021-05-10 18:51:27
osv
osv
Prototype pollution in chart.js
2021-05-10 18:47:53
CVE-2020-7746
2020-10-29 08:15:12
ibm
ibm
Security Bulletin: Denial of Service Vulnerability in Chart.js affects IBM Spectrum Protect Plus (CVE-2020-7746)
2020-12-04 08:01:37
Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to denial of service due to Chart.js (CVE-2020-7746)
2023-12-01 10:32:50
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.1
2022-10-28 18:30:08
ubuntucve
ubuntucve
CVE-2020-7746
2020-10-29 00:00:00
cve
cve
CVE-2020-7746
2020-10-29 08:15:00
prion
prion
Code injection
2020-10-29 08:15:00
veracode
veracode
Prototype Pollution
2020-10-30 03:59:08
github
github
Prototype pollution in chart.js
2021-05-10 18:47:53
nessus
nessus
Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 44, 9.x < 9.0.0 Patch 37, 10.0.x < 10.0.5 Multiple Vulnerabilities
2023-10-26 00:00:00
ics
ics
Mitsubishi Electric EcoWebServerIII
2022-02-24 12:00:00
redhat
redhat
(RHSA-2022:6813) Important: Red Hat Process Automation Manager 7.13.1 security update
2022-10-05 10:42:47

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%

JSON
Related for RH:CVE-2020-7746
debiancve1nodejs1osv2ibm4ubuntucve1cve1prion1veracode1github1nessus1ics1redhat1