CVE-2020-28458

Prototype Pollution

High · published December 16, 2020

CVSS v3.1
7.3
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.03715 · 89.7th percentile
Published
2020-12-16T10:35Z
EPSS history
Timeline
  • 16 DEC 10:35Z
    Prototype Pollution
    cvelistv5