Lucene search
+L

3 matches found

OSV
OSV
•added 2020/10/20 11:15 a.m.•20 views

CVE-2020-7748

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

8.1CVSS6.8AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2020/10/20 10:25 a.m.•40 views

CVE-2020-7748 Prototype Pollution

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

5.6CVSS8AI score0.01721EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/20 12:00 a.m.•4 views

CVE-2020-7748: Improperly Controlled Modification of Object Prototype Attributes

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

8.1CVSS5.9AI score0.01721EPSS
SaveExploits1References2
Rows per page
Query Builder