CVE-2020-7679 Prototype Pollution
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm casperjs(npm) | <= 1.1.4 | No fix listed |
| casperjs | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com broken-link
- snyk.io exploit mitigation third-party-advisory
- snyk.io exploit mitigation third-party-advisory
- github.com