CVEDB API

All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2020-7717

Dot-Notes Project » Dot-Notes » Version: N/A

cpe:2.3:a:dot-notes_project:dot-notes:-
Dot-Notes Project » Dot-Notes » Version: 1.1.1

cpe:2.3:a:dot-notes_project:dot-notes:1.1.1
Dot-Notes Project » Dot-Notes » Version: 2.0.0

cpe:2.3:a:dot-notes_project:dot-notes:2.0.0
Dot-Notes Project » Dot-Notes » Version: 2.0.1

cpe:2.3:a:dot-notes_project:dot-notes:2.0.1
Dot-Notes Project » Dot-Notes » Version: 2.1.0

cpe:2.3:a:dot-notes_project:dot-notes:2.1.0
Dot-Notes Project » Dot-Notes » Version: 3.0.0

cpe:2.3:a:dot-notes_project:dot-notes:3.0.0
Dot-Notes Project » Dot-Notes » Version: 3.1.0

cpe:2.3:a:dot-notes_project:dot-notes:3.1.0
Dot-Notes Project » Dot-Notes » Version: 3.1.1

cpe:2.3:a:dot-notes_project:dot-notes:3.1.1
Dot-Notes Project » Dot-Notes » Version: 3.2.0

cpe:2.3:a:dot-notes_project:dot-notes:3.2.0