CVE-2020-7792 Vulnerability Details

  /     /     /  

CVE-2020-7792 Metadata Quick Info

CVE Published: 11/12/2020 | CVE Updated: 17/09/2024 | CVE Year: 2020
Source: snyk | Vendor: n/a | Product: mout
Status : PUBLISHED

---

CVE-2020-7792 Description

This affects all versions of package mout. The deepFillIn function can be used to \'fill missing properties recursively\', while the deepMixIn \'mixes objects into the target object, recursively mixing existing child objects as well\'. In both cases, the key used to access the target object recursively is not checked, leading to a Prototype Pollution.

Metrics

CVSS Version: 3.1 | Base Score: 7.5 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

l➤ Exploitability Metrics:
    Attack Vector (AV)* NETWORK
    Attack Complexity (AC)* LOW
    Privileges Required (PR)* NONE
    User Interaction (UI)* NONE
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* NONE
    Integrity Impact (I)* NONE
    Availability Impact (A)* HIGH

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Prototype Pollution
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).