CVE-2020-7708

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-7708

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7708.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-7708

Aliases

GHSA-j7cg-h9v9-6vqp

Related

SNYK-JS-IRRELONPATH-598672
SNYK-JS-IRRELONPATH-598673

Published

2020-08-18T15:15:12.333Z

Modified

2026-07-08T05:59:08.132641198Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:irrelon:\\@irrelon\\/path:*:*:*:*:*:node.js:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "4.7.0"
                }
            ],
            "vendor_product": "irrelon:@irrelon/path",
            "source": "CPE_RANGE"
        },
        {
            "cpes": [
                "cpe:2.3:a:irrelon:irrelon-path:*:*:*:*:*:node.js:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "4.7.0"
                }
            ],
            "vendor_product": "irrelon:irrelon-path",
            "source": "CPE_RANGE"
        },
        {
            "extracted_events": [
                {
                    "fixed": "4.7.0"
                },
                {
                    "fixed": "4.7.0"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/irrelon/irrelon-path

Affected ranges

Type

GIT

Repo

https://github.com/irrelon/irrelon-path

Events

Introduced

Fixed

8a126b160c1a854ae511659c111413ad9910ebe3

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7708.json"