Prototype Pollution

🗓️ 02 Sep 2020 06:31:08Reported by Veracode Vulnerability DatabaseType

node-forge vulnerable to prototype pollutio

Reporter	Title	Published	Views	Family All 27
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js node-forge module affects IBM Cloud Pak for Multicloud Management Managed Service.	15 Dec 202017:38	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container is vulnerable to CVE-2020-7720	2 Nov 202013:16	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js node-forge module affects IBM Cloud Automation Manager.	26 Nov 202021:46	–	ibm
CVE	CVE-2020-7720	1 Sep 202009:35	–	cve
Cvelist	CVE-2020-7720 Prototype Pollution	1 Sep 202009:35	–	cvelist
Debian CVE	CVE-2020-7720	1 Sep 202009:35	–	debiancve

Vulners

Node

webjars node-forgeRange0.6.30–0.8.5js

node-forge node-forgeRange0.1.2–0.9.2js

Source	Link
github	www.github.com/digitalbazaar/forge/blob/0.9.2/lib/util.js
github	www.github.com/digitalbazaar/forge/blob/master/CHANGELOG.md
github	www.github.com/digitalbazaar/forge/commit/e955dcb34f7d5653c3020b81aee09e992e1eab0a

02 Dec 2022 21:17Current

3.5Low risk

Vulners AI Score3.5

CVSS 3.17.3 - 9.8

CVSS 27.5

EPSS0.02085