Lucene search
+L
Dot-object ProjectDot-object

1 matches found

CVE
CVE
added 2020/02/18 3:57 p.m.72 views

CVE-2019-10793

CVE-2019-10793 affects the dot-object module prior to version 2.1.3. The vulnerability is a Prototype Pollution flaw where the set function can be tricked into adding or modifying properties on Object.prototype via a proto payload. Evidence in connected records confirms the issue and its descript...

6.5CVSS6.3AI score0.01098EPSS
Save