CVE-2019-10798

Published: Feb 24, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.prototype.add method could be tricked into adding or modifying properties of Object.prototype.

Affected (3)

Products: Rdf Graph Array Project: Rdf Graph Array

Rdf Graph Array Project

1 product

Rdf Graph Array

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Rdf Graph Array Project Rdf Graph Array	Version 0.3.0
Rdf Graph Array Project Rdf Graph Array	Version 0.3.0 rc1
Rdf Graph Array Project Rdf Graph Array	Version 0.3.0 rc6

References (4)

https://github.com/rdf-ext-archive/rdf-graph-array/blob/master/index.js#L211

Source: report@snyk.io

ExploitTool Signature

https://snyk.io/vuln/SNYK-JS-RDFGRAPHARRAY-551803

Source: report@snyk.io

Third Party Advisory

https://github.com/rdf-ext-archive/rdf-graph-array/blob/master/index.js#L211

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTool Signature

https://snyk.io/vuln/SNYK-JS-RDFGRAPHARRAY-551803

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.