CVE-2020-28478--PoC

Questo repository non contiene un README...

@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)

gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: OSV:GHSA-6G8V-HPGW-H2V7...

CVE-2020-28478

This affects the package gsap before 3.6.0...

CVE-2020-28478 Prototype Pollution

This affects the package gsap before 3.6.0...

CVE-2020-28478

The CVE-2020-28478 entry concerns the gsap JavaScript library with a Prototype Pollution vulnerability affecting all versions before 3.6.0. The connected documents corroborate that an attacker could pollute Object.prototype via unsafe recursive merges or path-based property definitions, enabling ...

@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)

gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: SNYK:JS-GSAP-1054614...