PT-2020-6070 · Npm+4 · Dot-Prop+4
Published
2020-02-04
·
Updated
2022-08-05
·
CVE-2020-8116
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
dot-prop versions before 4.2.1
dot-prop versions 5.x before 5.1.1
Description
The issue allows an attacker to add arbitrary properties to JavaScript objects, which can lead to a prototype pollution attack. This can be exploited by a remote attacker.
Recommendations
For dot-prop versions before 4.2.1, update to version 4.2.1 or later.
For dot-prop versions 5.x before 5.1.1, update to version 5.1.1 or later.
Exploit
Fix
Prototype Pollution
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Centos
Red Hat
Rocky Linux
Dot-Prop