CVE-2020-15366

An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the worst case of an untrusted schema should be a denial of service, not execution of code.)

CVSS v3 5.6 MEDIUM
CVSS v2.0 6.8 MEDIUM

5.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://github.com/ajv-validator/ajv/releases/tag/v6.12.3	Release Notes Third Party Advisory
https://github.com/ajv-validator/ajv/tags	Third Party Advisory
https://hackerone.com/bugs?subject=user&report_id=894259	Permissions Required
https://security.netapp.com/advisory/ntap-20240621-0007/

Configurations

Configuration 1 (hide)

cpe:2.3:a:ajv.js:ajv:6.12.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-07-15 20:15

Updated : 2024-06-21 19:15

NVD link : CVE-2020-15366

Mitre link : CVE-2020-15366

CVE.ORG link : CVE-2020-15366

JSON object : View

Products Affected

ajv.js

ajv

CWE

CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

{"id": "CVE-2020-15366", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 2.2}]}, "published": "2020-07-15T20:15:13.380", "references": [{"url": "https://github.com/ajv-validator/ajv/releases/tag/v6.12.3", "tags": ["Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/ajv-validator/ajv/tags", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://hackerone.com/bugs?subject=user&report_id=894259", "tags": ["Permissions Required"], "source": "cve@mitre.org"}, {"url": "https://security.netapp.com/advisory/ntap-20240621-0007/", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1321"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the worst case of an untrusted schema should be a denial of service, not execution of code.)"}, {"lang": "es", "value": "Se detect\u00f3 un problema en la funci\u00f3n ajv.validate() en Ajv (tambi\u00e9n se conoce como Another JSON Schema Validator) versi\u00f3n 6.12.2. Un esquema JSON cuidadosamente dise\u00f1ado podr\u00eda ser proporcionado que permita una ejecuci\u00f3n de otro c\u00f3digo mediante una contaminaci\u00f3n de prototipo. (Si bien se recomiendan esquemas no confiables, el peor caso de un esquema no confiable debe ser una denegaci\u00f3n de servicio, no la ejecuci\u00f3n de c\u00f3digo)"}], "lastModified": "2024-06-21T19:15:16.020", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ajv.js:ajv:6.12.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A5BC338-EF25-4E55-8521-F59D10963910"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}