mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 19:21:35 +02:00
18 lines
687 B
Markdown
18 lines
687 B
Markdown
### [CVE-2020-7618](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7618)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- https://snyk.io/vuln/SNYK-JS-SDS-564123
|
|
|
|
#### Github
|
|
- https://github.com/Live-Hack-CVE/CVE-2020-7618
|
|
|