Lucene search
Veracode Vulnerability DatabaseVERACODE:36510HistoryJul 26, 2022 - 10:11 a.m.
Prototype Pollution
2022-07-2610:11:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
conf-cfg-ini
prototype pollution
malicious ini file
global object
EPSS
0.002
Percentile
57.1%
conf-cfg-ini is vulnerable to prototype pollution. A malicious INI file can be parsed and decoded as it does not protect the properties such as “proto” to pollute the global object prototype.
Related
osv
osv
conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2
2022-07-26 00:01:06
CVE-2020-28441
2022-07-25 14:15:09
cvelist
cvelist
CVE-2020-28441 Prototype Pollution
2022-07-25 14:06:32
cve
cve
CVE-2020-28441
2022-07-25 14:15:09
github
github
conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2
2022-07-26 00:01:06
nvd
nvd
CVE-2020-28441
2022-07-25 14:15:09
prion
prion
Code injection
2022-07-25 14:15:00