CVE-2020-7788

This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
Configurations

Configuration 1

cpe:2.3:a:ini_project:ini:*:*:*:*:*:node.js:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Information

Published : 2020-12-11 11:15

Updated : 2022-12-02 07:40


NVD link : CVE-2020-7788

Mitre link : CVE-2020-7788

Products Affected
No products.
CWE
CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')