CVE-2019-10808

High

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of…

snyk·CWE-1321·Published 2020-03-11

CVSS

8.8

EPSS

0.02

KEV

Exploits

cve.orgen

161 chars

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

NVDen

161 chars

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

GHSAen

161 chars

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

NVDes

203 chars

utilitify versiones anteriores a la versión 1.0.3, permite la modificación de las propiedades de objeto. El método de fusión podría ser engañado para agregar o modificar propiedades de Object.prototype.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.5	8.0	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	GHSA	8.8	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H