CVE-2020-7743

Prototype Pollution

High · published October 13, 2020

CVSS v3.1
7.3
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.03924 · 90.3th percentile
Published
2020-10-13T09:15Z
EPSS history
Timeline
  • 13 OCT 09:15Z
    Prototype Pollution
    cvelistv5