Cloud Vulnerability DB
A community-led vulnerabilities database
Register for the AI for Security Summit: Join Figma, Perplexity & Wiz
Vulnerability DatabaseCVE-2020-7792
CVE-2020-7792:
JavaScript vulnerability analysis and mitigation
Overview
The vulnerability CVE-2020-7792 affects all versions of the mout package and allows an attacker to add arbitrary properties to JavaScript language constructs such as objects through prototype pollution (CVE Mitre).
Technical details
The vulnerability exists in the deepMixIn and deepFillIn functions of the mout package. These functions are used for recursively mixing objects but fail to properly validate object properties during the merge operation, allowing for prototype pollution (GitHub Mout, GitHub Mout FillIn). This vulnerability was later found to be incompletely fixed, leading to CVE-2022-21213 (NVD CVE).
Impact
The vulnerability allows attackers to modify JavaScript language constructs by adding arbitrary properties to objects. This can lead to application behavior manipulation and potential denial of service conditions.
Additional resources
Source: This report was generated using AI
Related JavaScript vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management