HOMEVULNERABILITIESVENDORSJs-ini Project

Js-ini ProjectCVEs & Vulnerabilities

1 CVEs affecting Js-ini Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

js-ini 1
CVE-2020-28461CRITICAL

This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.

25 Jul 2022
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Js-ini Project CVEs & Vulnerabilities — 1 Tracked