Multi Ini

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-28460 Dec 22, 13:15 npm HIGH POC PATCH This Week

This affects the package multi-ini before 2.1.2. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Authentication Bypass Prototype Pollution Multi Ini

NVD GitHub

CVSS 3.1

8.1

EPSS

1.5%

CVE-2020-28448 Dec 22, 13:15 npm CRITICAL POC PATCH Act Now

This affects the package multi-ini before 2.1.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Prototype Pollution Multi Ini

NVD GitHub

CVSS 3.1

9.8

EPSS

1.4%

CVE-2020-28460 npm

EPSS 2% CVSS 8.1

HIGH POC PATCH This Week

This affects the package multi-ini before 2.1.2. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Authentication Bypass Prototype Pollution Multi Ini

NVD GitHub

CVE-2020-28448 npm

EPSS 1% CVSS 9.8

CRITICAL POC PATCH Act Now

Information Disclosure Prototype Pollution Multi Ini

NVD GitHub