摘要:
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
安全等级: Low
公告ID: KylinSec-SA-2022-1634
发布日期: 2022年7月22日
关联CVE: CVE-2020-7788
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|
