Files
CVEs-PoC/2020/CVE-2020-28461.md
T
2024-05-25 21:48:12 +02:00

749 B

CVE-2020-28461

Description

This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.

POC

Reference

Github

No PoCs found on GitHub currently.