PT-2020-16971
CVE-2020-28281
·
Published
2020-12-29
·
Updated
2021-04-13
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
set-object-value versions 0.0.0 through 0.0.5
Description
The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability.
Recommendations
For versions 0.0.0 through 0.0.5, update to a version that fixes the prototype pollution vulnerability to prevent potential denial of service and remote code execution attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾