CVE-2020-15366

An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2

published July 15, 2020

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the worst case of an untrusted schema should be a denial of service, not execution of code.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02313 · 83.3th percentile
Published
2020-07-15T19:14Z
EPSS history
Timeline
  • 15 JUL 19:14Z
    An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2
    cvelistv5