CVEs-PoC/2020/CVE-2020-7608.md

CVE-2020-7608

Description

yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "proto" payload.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381

Github

• https://github.com/Kirill89/Kirill89
• https://github.com/Live-Hack-CVE/CVE-2020-7608
• https://github.com/MaySoMusician/geidai-ikoi
• https://github.com/arsalan-learn/pnpm_test
• https://github.com/rahg0/vuln-node-app
• https://github.com/rahg0/vuln-node-app-pnpm
• https://github.com/rahg0/vuln-node-app-yarn
• https://github.com/seal-community/patches
• https://github.com/wils0n/sca-lab