CVE-2019-10808

Published March 11th, 2020

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

zerkalo-software/utilitify

The utilities for working with a collections such as objects, arrays and primitives such as numbers, strings, etc.

GitHub