CVE-2020-7709

This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
Configurations

Configuration 1 (hide)

cpe:2.3:a:smallpdf:json-pointer:*:*:*:*:*:node.js:*:*

History

21 Nov 2024, 05:37

Type Values Removed Values Added
CVSS v2 : 6.5
v3 : 7.2
v2 : 6.5
v3 : 6.0
References () https://github.com/manuelstofer/json-pointer/pull/34/files - Patch, Third Party Advisory () https://github.com/manuelstofer/json-pointer/pull/34/files - Patch, Third Party Advisory
References () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598862 - Exploit, Third Party Advisory () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598862 - Exploit, Third Party Advisory
References () https://snyk.io/vuln/SNYK-JS-JSONPOINTER-596925 - Exploit, Third Party Advisory () https://snyk.io/vuln/SNYK-JS-JSONPOINTER-596925 - Exploit, Third Party Advisory

Information

Published : 2020-10-05 08:15

Updated : 2024-11-21 05:37


NVD link : CVE-2020-7709

Mitre link : CVE-2020-7709

CVE.ORG link : CVE-2020-7709


JSON object : View

Products Affected

smallpdf

  • json-pointer
CWE
CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')