datatables.net vulnerable to Prototype Pollution due to incomplete fix

높음 7.3CVE-2020-28458 · GHSA-m7j4-fhg6-xf5v · Published 16/12/2020 · updated 17/06/2026

요약

CVE-2020-28458은(는) datatables.net (datatables), datatables.net에 영향을 주는 높음 (CVSS 7.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 3.7%, 전체 취약점의 89.8%보다 높음.
조치: 1.10.23, 1.10.22 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
datatables.net datatables	`< 1.10.23`	`1.10.23`
datatables.net npm	`< 1.10.22`	`1.10.22`

Description

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

NVD description

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

References

nvd.nist.gov/vuln/detail/CVE-2020-28458 · ADVISORY
DataTables/DataTablesSrc commit a51cbe9 · WEB
DataTables/DataTablesSrc · PACKAGE
DataTables/Dist-DataTables · WEB
security.netapp.com/advisory/ntap-20240621-0006 · WEB
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1051961 · WEB
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1051962 · WEB
snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402 · WEB
snyk.io/vuln/SNYK-JS-DATATABLESNET-598806 · WEB
security.netapp.com/advisory/ntap-20240621-0006

datatables.net의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free