Description

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

Remediation

References

CVE-2020-7743

Related Vulnerabilities

WordPress Plugin Slider by 10Web-Responsive Image Slider Unspecified Vulnerability (1.1.9)

WordPress Plugin wpForo Forum Multiple Vulnerabilities (2.1.7)

WordPress Plugin Companion Sitemap Generator Cross-Site Request Forgery (3.6.6)

WordPress Plugin Eu Cookie Notice Cross-Site Request Forgery (1.0.6)

Python Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-4650)

Severity

High

Classification

CVE-2020-7743 CWE-915 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities