Security Advisory

CVE-2019-10795

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-18 15:43:13
Last updated 2024-08-04 22:32:02
Assigner snyk
CVSS score not scored
State PUBLISHED

Description

undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.