high7.3
CVE-2020-7679
In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution.
Impact
In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Casperjs | Casperjs | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/casperjs/casperjs/blob/master/modules/utils.js%23L680
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-572804
- https://snyk.io/vuln/SNYK-JS-CASPERJS-572803
- https://github.com/casperjs/casperjs/blob/master/modules/utils.js%23L680
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-572804
- https://snyk.io/vuln/SNYK-JS-CASPERJS-572803