ini Project ini 1.3.3 for Node.js

CPE Details

ini Project ini 1.3.3 for Node.js
ini_project
ini
1.3.3
2020-12-16
15h54 +00:00
2020-12-16
15h54 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ini_project:ini:1.3.3:*:*:*:*:node.js:*:*

Informations

Vendor

ini_project

Product

ini

Version

1.3.3

Target Software

node.js

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-7788 2020-12-11 10h45 +00:00 This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
9.8
Critical