Vulnerabilities > CVE-2020-7637 - Unspecified vulnerability in Class-Transformer Project Class-Transformer

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

class-transformer-project

NVD

Published: 2020-04-06

Updated: 2024-11-21

Summary

class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

Vulnerable Configurations

Part	Description	Count
Application	Class-Transformer_Project Class Transformer Project Class Transformer 0.1.0 Class Transformer Project Class Transformer 0.1.1 Class Transformer Project Class Transformer 0.1.2 Class Transformer Project Class Transformer 0.1.3 Class Transformer Project Class Transformer 0.1.4 Class Transformer Project Class Transformer 0.1.5 Class Transformer Project Class Transformer 0.1.6 Class Transformer Project Class Transformer 0.1.7 Class Transformer Project Class Transformer 0.1.8 Class Transformer Project Class Transformer 0.1.9 Class Transformer Project Class Transformer 0.1.10 Class Transformer Project Class Transformer 0.2.0 Class Transformer Project Class Transformer 0.2.1 Class Transformer Project Class Transformer 0.2.2 Class Transformer Project Class Transformer 0.2.3	25

Summary

Vulnerable Configurations

References