Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Multi-ini ProjectMulti-ini*

2 matches found

CVE
CVE•added 2020/12/22 1:15 p.m.•41 views

CVE-2020-28460

This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.

8.1CVSS6.8AI score0.0053EPSS
CVE
CVE•added 2020/12/22 1:15 p.m.•40 views

CVE-2020-28448

This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array.

9.8CVSS7.2AI score0.00368EPSS