Vulnerabilities > CVE-2020-7743 - Unspecified vulnerability in Mathjs

CVSS 7.3 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

low complexity

mathjs

NVD

Published: 2020-10-13

Updated: 2022-06-28

Summary

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

Vulnerable Configurations

Part	Description	Count
Application	Mathjs Mathjs Mathjs 0.0.1 Mathjs Mathjs 0.0.2 Mathjs Mathjs 0.1.0 Mathjs Mathjs 0.2.0 Mathjs Mathjs 0.3.0 Mathjs Mathjs 0.4.0 Mathjs Mathjs 0.5.0 Mathjs Mathjs 0.6.0 Mathjs Mathjs 0.7.0 Mathjs Mathjs 0.7.1 Mathjs Mathjs 0.7.2 Mathjs Mathjs 0.8.0 Mathjs Mathjs 0.8.1 Mathjs Mathjs 0.8.2 Mathjs Mathjs 0.9.0 Mathjs Mathjs 0.9.1 Mathjs Mathjs 0.10.0 Mathjs Mathjs 0.11.0 Mathjs Mathjs 0.11.1 Mathjs Mathjs 0.12.0 Mathjs Mathjs 0.12.1 Mathjs Mathjs 0.13.0 Mathjs Mathjs 0.14.0 Mathjs Mathjs 0.15.0 Mathjs Mathjs 0.16.0 Mathjs Mathjs 0.17.0 Mathjs Mathjs 0.17.1 Mathjs Mathjs 0.18.0 Mathjs Mathjs 0.18.1 Mathjs Mathjs 0.19.0 Mathjs Mathjs 0.20.0 Mathjs Mathjs 0.21.0 Mathjs Mathjs 0.21.1 Mathjs Mathjs 0.22.0 Mathjs Mathjs 0.23.0 Mathjs Mathjs 0.24.0 Mathjs Mathjs 0.24.1 Mathjs Mathjs 0.25.0 Mathjs Mathjs 0.26.0 Mathjs Mathjs 0.27.0 Mathjs Mathjs 1.0.0 Mathjs Mathjs 1.0.1 Mathjs Mathjs 1.1.0 Mathjs Mathjs 1.1.1 Mathjs Mathjs 1.2.0 Mathjs Mathjs 1.3.0 Mathjs Mathjs 1.4.0 Mathjs Mathjs 1.5.0 Mathjs Mathjs 1.5.1 Mathjs Mathjs 1.5.2 Mathjs Mathjs 1.6.0 Mathjs Mathjs 1.7.0 Mathjs Mathjs 1.7.1 Mathjs Mathjs 2.0.0 Mathjs Mathjs 2.0.1 Mathjs Mathjs 2.1.0 Mathjs Mathjs 2.1.1 Mathjs Mathjs 2.2.0 Mathjs Mathjs 2.3.0 Mathjs Mathjs 2.4.0 Mathjs Mathjs 2.4.1 Mathjs Mathjs 2.4.2 Mathjs Mathjs 2.5.0 Mathjs Mathjs 2.6.0 Mathjs Mathjs 2.7.0 Mathjs Mathjs 3.0.0 Mathjs Mathjs 3.1.0 Mathjs Mathjs 3.1.1 Mathjs Mathjs 3.1.2 Mathjs Mathjs 3.1.3 Mathjs Mathjs 3.1.4 Mathjs Mathjs 3.2.0 Mathjs Mathjs 3.2.1 Mathjs Mathjs 3.3.0 Mathjs Mathjs 3.4.0 Mathjs Mathjs 3.4.1 Mathjs Mathjs 3.5.0 Mathjs Mathjs 3.5.1 Mathjs Mathjs 3.5.2 Mathjs Mathjs 3.5.3 Mathjs Mathjs 3.6.0 Mathjs Mathjs 3.7.0 Mathjs Mathjs 3.8.0 Mathjs Mathjs 3.8.1 Mathjs Mathjs 3.9.0 Mathjs Mathjs 3.9.1 Mathjs Mathjs 3.9.2 Mathjs Mathjs 3.9.3 Mathjs Mathjs 3.10.0 Mathjs Mathjs 3.10.1 Mathjs Mathjs 3.10.2 Mathjs Mathjs 3.10.3 Mathjs Mathjs 3.11.0 Mathjs Mathjs 3.11.1 Mathjs Mathjs 3.11.2 Mathjs Mathjs 3.11.3 Mathjs Mathjs 3.11.4 Mathjs Mathjs 3.11.5 Mathjs Mathjs 3.12.0 Mathjs Mathjs 3.12.1 Mathjs Mathjs 3.12.2 Mathjs Mathjs 3.12.3 Mathjs Mathjs 3.13.0 Mathjs Mathjs 3.13.1 Mathjs Mathjs 3.13.2 Mathjs Mathjs 3.13.3 Mathjs Mathjs 3.14.0 Mathjs Mathjs 3.14.1 Mathjs Mathjs 3.14.2 Mathjs Mathjs 3.15.0 Mathjs Mathjs 3.16.0 Mathjs Mathjs 3.16.1 Mathjs Mathjs 3.16.2 Mathjs Mathjs 3.16.3 Mathjs Mathjs 3.16.4 Mathjs Mathjs 3.16.5 Mathjs Mathjs 3.17.0 Mathjs Mathjs 3.18.0 Mathjs Mathjs 3.18.1 Mathjs Mathjs 3.19.0 Mathjs Mathjs 3.20.0 Mathjs Mathjs 3.20.1 Mathjs Mathjs 3.20.2 Mathjs Mathjs 4.0.0 Mathjs Mathjs 4.0.1 Mathjs Mathjs 4.1.0 Mathjs Mathjs 4.1.1 Mathjs Mathjs 4.1.2 Mathjs Mathjs 4.2.0 Mathjs Mathjs 4.2.1 Mathjs Mathjs 4.2.2 Mathjs Mathjs 4.3.0 Mathjs Mathjs 4.4.0 Mathjs Mathjs 4.4.1 Mathjs Mathjs 4.4.2 Mathjs Mathjs 5.0.0 Mathjs Mathjs 5.0.1 Mathjs Mathjs 5.0.2 Mathjs Mathjs 5.0.3 Mathjs Mathjs 5.0.4 Mathjs Mathjs 5.1.0 Mathjs Mathjs 5.1.1 Mathjs Mathjs 5.1.2 Mathjs Mathjs 5.2.0 Mathjs Mathjs 5.2.1 Mathjs Mathjs 5.2.2 Mathjs Mathjs 5.2.3 Mathjs Mathjs 5.3.0 Mathjs Mathjs 5.3.1 Mathjs Mathjs 5.4.0 Mathjs Mathjs 5.4.1 Mathjs Mathjs 5.4.2 Mathjs Mathjs 5.5.0 Mathjs Mathjs 5.6.0 Mathjs Mathjs 5.7.0 Mathjs Mathjs 5.8.0 Mathjs Mathjs 5.9.0 Mathjs Mathjs 5.10.0 Mathjs Mathjs 5.10.1 Mathjs Mathjs 5.10.2 Mathjs Mathjs 5.10.3 Mathjs Mathjs 6.0.0 Mathjs Mathjs 6.0.1 Mathjs Mathjs 6.0.2 Mathjs Mathjs 6.0.3 Mathjs Mathjs 6.0.4 Mathjs Mathjs 6.1.0 Mathjs Mathjs 6.2.0 Mathjs Mathjs 6.2.1 Mathjs Mathjs 6.2.2 Mathjs Mathjs 6.2.3 Mathjs Mathjs 6.2.4 Mathjs Mathjs 6.2.5 Mathjs Mathjs 6.3.0 Mathjs Mathjs 6.4.0 Mathjs Mathjs 6.5.0 Mathjs Mathjs 6.6.0 Mathjs Mathjs 6.6.1 Mathjs Mathjs 6.6.2 Mathjs Mathjs 6.6.3 Mathjs Mathjs 6.6.4 Mathjs Mathjs 6.6.5 Mathjs Mathjs 7.0.0 Mathjs Mathjs 7.0.1 Mathjs Mathjs 7.0.2 Mathjs Mathjs 7.1.0 Mathjs Mathjs 7.2.0 Mathjs Mathjs 7.3.0 Mathjs Mathjs 7.4.0 Mathjs Mathjs 7.5.0	190

Summary

Vulnerable Configurations

References