Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-28281

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution.

Description

Prototype pollution vulnerability in 'set-object-value' versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a set-object-value

  • 0.0.0, 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5affected

References