Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-7788

Prototype Pollution

This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.

CVSS 3.1 · 7.3 High EPSS 3.7% KEV · Not listed
Vendors
Debian Ini Project Redhat
Products
Debian Linux Ini Enterprise Linux and 2 more