Vulnerabilities > CVE-2019-10798 - Unspecified vulnerability in Rdf-Graph-Array Project Rdf-Graph-Array 0.3.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
rdf-graph-array-project

Summary

rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.prototype.add method could be tricked into adding or modifying properties of Object.prototype.

Vulnerable Configurations

Part Description Count
Application
Rdf-Graph-Array_Project
3