CVEs-PoC/2020/CVE-2020-7598.md

CVE-2020-7598

Description

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-MINIMIST-559764

Github

• https://github.com/ForEvolve/git-extensions-for-vs-code
• https://github.com/HotDB-Community/HotDB-Engine
• https://github.com/Kirill89/Kirill89
• https://github.com/LucianoBestia/mem1_electron
• https://github.com/VirgilioMike/xss-scanner
• https://github.com/andisfar/LaunchQtCreator
• https://github.com/anthonykirby/lora-packet
• https://github.com/arsalan-learn/pnpm_test
• https://github.com/bestia-dev-archived/mem1_electron
• https://github.com/bestia-dev/mem1_electron
• https://github.com/brianmcfadden/railsindex
• https://github.com/keymandll/dtrack.rs
• https://github.com/lirantal/pp-minimist-poc
• https://github.com/markusweldon/snyk-sca-githubactions
• https://github.com/nevermoe/CVE-2021-44906
• https://github.com/rpl/flow-coverage-report
• https://github.com/seal-community/patches
• https://github.com/sivendar2/angular-vuln
• https://github.com/therickybobbeh/dep-scanner
• https://github.com/wils0n/sca-lab