CVE-2020-28269: Critical severity exodus field vulnerability

Q: What is CVE-2020-28269?

CVE-2020-28269 is a prototype pollution vulnerability in the 'field' package versions 0.0.1 through 1.0.1, allowing an attacker to cause a denial of service and potentially execute remote code.

Q: What is the severity level of CVE-2020-28269?

The severity level of CVE-2020-28269 is critical, with a CVSS score of 9.8.

Q: How does CVE-2020-28269 affect the 'field' package?

CVE-2020-28269 affects 'field' versions 0.0.1 through 1.0.1, exposing a vulnerability to prototype pollution.

Q: How can CVE-2020-28269 be exploited?

CVE-2020-28269 can be exploited by an attacker to cause a denial of service and potentially execute remote code.

Q: Is there a fix available for CVE-2020-28269?

Yes, it is recommended to update to a fixed version of the 'field' package, which is available after version 1.0.1.

Published Nov 12, 2020

Updated

Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Affected Software

2 affected components

npm/field>=0.0.1<=1.0.1

Exodus Field>=0.0.1<=1.0.1

Remediation

Patch Available

https://github.com/jprichardson/field/blob/2a3811dfc4cdd13833977477d2533534fc61ce06/lib/field.js#L39

Event History

Nov 12, 2020

CVE Published

via MITRE·05:16 PM

Data Sourced

via MITRE·05:16 PM

DescriptionWeakness

Dec 10, 2021

Advisory Published

05:22 PM

Frequently Asked Questions

What is CVE-2020-28269?

CVE-2020-28269 is a prototype pollution vulnerability in the 'field' package versions 0.0.1 through 1.0.1, allowing an attacker to cause a denial of service and potentially execute remote code.

What is the severity level of CVE-2020-28269?

The severity level of CVE-2020-28269 is critical, with a CVSS score of 9.8.

How does CVE-2020-28269 affect the 'field' package?