CVE-2020-28458
- Source
- https://cve.org/CVERecord?id=CVE-2020-28458
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-28458.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-28458
- Aliases
- Downstream
- Related
- Published
- 2020-12-16T11:15:12.130Z
- Modified
- 2026-04-11T23:13:03.387648Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- [none]
- Details
-
All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
- References
-
- https://github.com/DataTables/Dist-DataTables/blob/master/js/jquery.dataTables.js%23L2766
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1051961
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1051962
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402
- https://github.com/DataTables/DataTablesSrc/commit/a51cbe99fd3d02aa5582f97d4af1615d11a1ea03
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806
Affected packages
Git / github.com/datatables/datatablessrc
Affected ranges
- Type
- GIT
- Repo
- https://github.com/datatables/datatablessrc
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
{ "source": [ "CPE_FIELD", "REFERENCES" ], "cpe": "cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:node.js:*:*", "extracted_events": [ { "introduced": "0" }, { "fixed": "1.10.23" } ] }