CVE-2020-7778

Prototype Pollution

High · published November 26, 2020

CVSS v3.1
7.3
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O
CVSS v4.0
Not supplied
EPSS
0.02422 · 84.1th percentile
Published
2020-11-26T10:40Z
EPSS history
Timeline
  • 26 NOV 10:40Z
    Prototype Pollution
    cvelistv5