CVE-2020-28462
Prototype Pollution
High · published July 25, 2022
What it is
This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.
The record
Technical detail
- CVSS v3.1
- 7.3 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P
- CVSS v4.0
- Not supplied
- EPSS
- 0.00942 · 60.6th percentile
- Published
- 2022-07-25T14:07Z
EPSS history
Timeline
25 JUL 14:07Z
Prototype Pollution
cvelistv5