CVE-2020-7618

medium

Description

sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.

References

https://snyk.io/vuln/SNYK-JS-SDS-564123

https://github.com/monsterkodi/sds/blob/master/js/set.js#L31

Details

Source: Mitre, NVD

Published: 2020-04-07

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N