Skip to content
Sign in
Not rated

CVE-2020-7600 querymen prior to 2.1.4 allows modification of object properties

Description

querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.

Affected products and versions

Product Affected versions Fixed in
querymen Versions not published

Other CVEs of querymen

The 2 CVEs of querymen →
CVE-2022-25871 All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function… 5.9 Medium
Track this CVE