CVE-2020-8116CWE-471

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to…

published February 4, 2020

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03079 · 87.6th percentile
Weakness
CWE-471 · Modification of Assumed-Immutable Data (MAID)
Published
2020-02-04T19:08Z
EPSS history
Timeline
  • 04 FEB 19:08Z
    Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to…
    cvelistv5