Vulnerabilities > CVE-2020-28274 - Unspecified vulnerability in Deepref Project Deepref

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

deepref-project

critical

NVD

Published: 2020-12-08

Updated: 2024-11-21

Summary

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution.

Vulnerable Configurations

Part	Description	Count
Application	Deepref_Project Deepref Project Deepref 1.1.1 Deepref Project Deepref 1.1.2 Deepref Project Deepref 1.2.0 Deepref Project Deepref 1.2.1	4

References

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2