Lucene search
+L

9 matches found

OSV
OSV
•added 2020/09/14 9:42 p.m.•81 views

GHSA-92XJ-MQP7-VMCJ Prototype Pollution in node-forge

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS8.1AI score0.03188EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2020/09/01 6:18 p.m.•38 views

CVE-2020-7720

A flaw was found in nodejs-node-forge. A Prototype Pollution via the util.setPath function is possible...

7.3CVSS3.9AI score0.03188EPSS
SaveExploits1References4
NVD
NVD
•added 2020/09/01 10:15 a.m.•32 views

CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS9.4AI score0.03188EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2020/09/01 10:15 a.m.•33 views

CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS7.1AI score0.03188EPSS
SaveExploits1References5
OSV
OSV
•added 2020/09/01 10:15 a.m.•27 views

UBUNTU-CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS7.2AI score0.03188EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2020/09/01 9:35 a.m.•68 views

CVE-2020-7720

Removed by vendor...

9.8CVSS7.4AI score0.03188EPSS
SaveExploits1
Mend
Mend
•added 2020/09/01 9:35 a.m.•2 views

CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS0.03188EPSS
SaveExploits1References6
CVE
CVE
•added 2020/09/01 9:35 a.m.•182 views

CVE-2020-7720

CVE-2020-7720 is a prototype pollution vulnerability in the node-forge library (util.setPath) present in older node-forge releases. Multiple connected sources confirm that versions prior to 0.10.0 are affected, with 0.10.0 removing the vulnerable functions. Public risk scores in the sources range...

9.8CVSS7.1AI score0.03188EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/01 12:00 a.m.•3 views

CVE-2020-7720: Improperly Controlled Modification of Object Prototype Attributes

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS8.2AI score0.03188EPSS
SaveExploits1References2
Rows per page
Query Builder