by Kastro
Paper/Archive/CVE-2020-8125

CVE-2020-8125

hackerone — Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote co…

EPSS 4%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 90.8.908 × 2018.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona.

Affected

ProductAffectedFixed inSource
klona npm moduleFixed Version: v1.1.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhackerone.com/reports/778414