CVE-2020-28273

CRITICAL EPSS 88.9%
Published Dec 2, 20205y ago · Modified Jun 17, 20262w ago
9.8 CVSS 3.1
Critical
Find Similar
Published Dec 2, 2020 5y ago
Last Modified Jun 17, 2026 2w ago

Description

Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.

CVSS Details

Base Score
9.8
Exploitability
3.9
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
88.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Affected Products 1

VendorProductVersionRange
set-in_projectset-in*≥1.0.0  –  ≤2.0.0

References 3

  • github.com https://github.com/ahdinosaur/set-in/commit/e431effa00195a6f06b111e09733cd1445a91a88
    PatchThird Party Advisory
  • whitesourcesoftware.com https://www.whitesourcesoftware.com/vulnerability-database
    Third Party Advisory
  • whitesourcesoftware.com https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28273
    ExploitThird Party Advisory

Remediation

  • github.com https://github.com/ahdinosaur/set-in/commit/e431effa00195a6f06b111e09733cd1445a91a88
    PatchThird Party Advisory