Vulnerabilities > CVE-2020-28442 - Unspecified vulnerability in Js-Data
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |