Vulnerability in Gulpjs Copy-Props
CVE-2020-28503
The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.
EPSS: 0.017 (74.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Gulpjs Copy-props
- N/a Copy-props — versions unspecified
References
- report@snyk.io (Exploit, Third Party Advisory, x_refsource_MISC)
- report@snyk.io (Exploit, Third Party Advisory, x_refsource_MISC)
- report@snyk.io (Patch, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-28503?
- CVE-2020-28503 is a high-severity vulnerability in Gulpjs Copy-Props. CVSS score: 7.3/10. Published 2021-03-23.
- How severe is CVE-2020-28503?
- High severity. CVSS v3 base score is 7.3 out of 10.