CVE-2020-7788

A flaw was found in nodejs-ini. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context...

PT-2020-6064 · Ini +6 · Ini +6

Name of the Vulnerable Software and Affected Versions: ini versions prior to 1.3.6 Description: The issue is related to an uncontrolled modification of object prototype attributes in the ini library. This can be exploited by submitting a malicious INI file to an application that parses it with...