PT-2020-19731

CVE-2020-7709

·

Published

2020-10-05

·

Updated

2025-03-05

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions json-pointer versions prior to 0.6.1
Description The issue affects the json-pointer package, where multiple references of an object using a slash are supported.
Recommendations For versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-7MG4-W3W5-X5PC
SNYK-JAVA-ORGWEBJARSNPM-598862
SNYK-JS-JSONPOINTER-596925
Found an issue in the description? Have something to add? Feel free to write us 👾