Read the docs

Ini-parser Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ini-parser Project records in CISA KEV

No Ini-parser Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 44

ini-parser through 0.0.2 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of Object.prototype using a '__proto__' payload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00872 Published 2020-04-02 No fix listed CWE-1321
Open these records in search →