← Back

CVE-2020-7774

nvd nist
Published: Nov 17, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

Affected (7)

Y18n Project
1 product
Y18n
Oracle
1 product
Graalvm
Siemens
1 product
Sinec Infrastructure Network Services
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Y18n Project
Y18n
Before 3.2.2
Y18n
From 5.0.0 to 5.0.5
Y18n
Version 4.0.0
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Graalvm
Version 19.3.5
Graalvm
Version 20.3.1.2
Graalvm
Version 21.0.0.2
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Sinec Infrastructure Network Services
Before 1.0.1.1

Related CWEs

CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

References (12)

Source: report@snyk.io
PatchThird Party Advisory
Source: report@snyk.io
ExploitThird Party Advisory
Source: report@snyk.io
PatchThird Party Advisory
Source: report@snyk.io
ExploitThird Party Advisory
Source: report@snyk.io
ExploitThird Party Advisory
Source: report@snyk.io
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.