Lucene search
+L
Ini-parser ProjectIni-parser

1 matches found

CVE
CVE
added 2020/04/02 6:0 p.m.62 views

CVE-2020-7617

The CVE-2020-7617 entry concerns the ini-parser package (up to version 0.0.2) and describes a Prototype Pollution vulnerability. An attacker can exploit a proto payload to add or modify properties on Object.prototype, enabling potential attacker-controlled behavior across JavaScript objects. Seve...

9.8CVSS6.7AI score0.00864EPSS
Save