CVEs-PoC/2020/CVE-2020-7598.md

CVE-2020-7598

Description

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-MINIMIST-559764

Github

• https://github.com/ForEvolve/git-extensions-for-vs-code
• https://github.com/HotDB-Community/HotDB-Engine
• https://github.com/Kirill89/Kirill89
• https://github.com/LucianoBestia/mem1_electron
• https://github.com/andisfar/LaunchQtCreator
• https://github.com/anthonykirby/lora-packet
• https://github.com/bestia-dev-archived/mem1_electron
• https://github.com/bestia-dev/mem1_electron
• https://github.com/brianmcfadden/railsindex
• https://github.com/lirantal/pp-minimist-poc
• https://github.com/nevermoe/CVE-2021-44906
• https://github.com/rpl/flow-coverage-report
• https://github.com/seal-community/patches