Msrc Cbl2 Js-Jquery 3.5.0-4 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_js-jquery_3.5.0-4_on_cbl_mariner_2.0.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2019-20149HIGHCVSS 7.52019-12-10
CVE-2019-20149 [HIGH] CWE-668 ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name as demonstrated by 'constructor': {'name':'Symbol'}. Hence a crafted p ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name as demonstrated by 'constructor': {'name':'Symbol'}. Hence a crafted payload can overwrite this builtin attribute to manipulate the type de
msrc