medium5.3
CVE-2020-7638
confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prot…
Impact
confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Confinit Project | Confinit | through 0.3.0 |