Beveiligingsadvies

CVE-2020-28448

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-22 13:05:19

Laatst bijgewerkt 2024-09-16 19:36:53

Toegewezen door snyk

CVSS-score 5.6

Status PUBLISHED

This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array.