CVE-2020-7618

PoC —

CVSS 3.1

5.3 medium

EPSS

1%p65

Published

Apr 7, 2020 (Apr 7, 2020)

Modified

Jun 17, 2026

Description

sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.

Vendors: sds project
Products: sds
Weakness: CWE-1321
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.