CVE-2020-7638

confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of…

published April 6, 2020

CVSS
—
EPSS
1%
Percentile
63.1
In the wild
Unconfirmed
What it is

confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01022 · 63.1th percentile
Published
2020-04-06T12:38Z
EPSS history
Timeline
  • 06 APR 12:38Z
    confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of…
    cvelistv5