This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://security.snyk.io/vuln/SNYK-JS-IONPARSER-1048971 |
Configurations
No configuration.
Information
Published : 2022-07-25 14:15
Updated : 2022-07-25 15:15
NVD link : CVE-2020-28462
Mitre link : CVE-2020-28462
JSON object : View
Products Affected
No product.
CWE
No CWE.
