CVE-2020-7768

Prototype Pollution

High · published November 11, 2020

CVSS v3.1
7.5
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.04026 · 90.5th percentile
Published
2020-11-11T10:20Z
EPSS history
Timeline
  • 11 NOV 10:20Z
    Prototype Pollution
    cvelistv5