CVE-2020-28458
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-28458
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-28458.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-28458
- Aliases
-
- GHSA-m7j4-fhg6-xf5v
- SNYK-JAVA-ORGWEBJARSBOWER-1051961
- SNYK-JAVA-ORGWEBJARSNPM-1051962
- SNYK-JS-DATATABLESNET-1016402
- SNYK-JS-DATATABLESNET-598806
- Related
- Published
- 2020-12-16T11:15:12Z
- Modified
- 2024-10-12T06:27:50.955466Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- [none]
- Details
-
All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
- References
-
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1051961
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1051962
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806
- https://github.com/DataTables/DataTablesSrc/commit/a51cbe99fd3d02aa5582f97d4af1615d11a1ea03
- https://github.com/DataTables/Dist-DataTables/blob/master/js/jquery.dataTables.js%23L2766