CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10747

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and _proto_ payloads.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-10747

Set-Value Project » Set-Value » Version: N/A

cpe:2.3:a:set-value_project:set-value:-
Set-Value Project » Set-Value » Version: 0.1.0

cpe:2.3:a:set-value_project:set-value:0.1.0
Set-Value Project » Set-Value » Version: 0.1.1

cpe:2.3:a:set-value_project:set-value:0.1.1
Set-Value Project » Set-Value » Version: 0.1.2

cpe:2.3:a:set-value_project:set-value:0.1.2
Set-Value Project » Set-Value » Version: 0.1.3

cpe:2.3:a:set-value_project:set-value:0.1.3
Set-Value Project » Set-Value » Version: 0.1.4

cpe:2.3:a:set-value_project:set-value:0.1.4
Set-Value Project » Set-Value » Version: 0.1.6

cpe:2.3:a:set-value_project:set-value:0.1.6
Set-Value Project » Set-Value » Version: 0.2.0

cpe:2.3:a:set-value_project:set-value:0.2.0
Set-Value Project » Set-Value » Version: 0.3.0

cpe:2.3:a:set-value_project:set-value:0.3.0
Set-Value Project » Set-Value » Version: 0.3.1

cpe:2.3:a:set-value_project:set-value:0.3.1
Set-Value Project » Set-Value » Version: 0.3.2

cpe:2.3:a:set-value_project:set-value:0.3.2
Set-Value Project » Set-Value » Version: 0.3.3

cpe:2.3:a:set-value_project:set-value:0.3.3
Set-Value Project » Set-Value » Version: 0.4.0

cpe:2.3:a:set-value_project:set-value:0.4.0
Set-Value Project » Set-Value » Version: 0.4.1

cpe:2.3:a:set-value_project:set-value:0.4.1
Set-Value Project » Set-Value » Version: 0.4.2

cpe:2.3:a:set-value_project:set-value:0.4.2
Set-Value Project » Set-Value » Version: 0.4.3

cpe:2.3:a:set-value_project:set-value:0.4.3
Set-Value Project » Set-Value » Version: 1.0.0

cpe:2.3:a:set-value_project:set-value:1.0.0
Set-Value Project » Set-Value » Version: 2.0.0

cpe:2.3:a:set-value_project:set-value:2.0.0
Set-Value Project » Set-Value » Version: 3.0.0

cpe:2.3:a:set-value_project:set-value:3.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10747

Products

Pricing

Contact Us