CVE-2020-36618 MEDIUM

CVE-2020-36618: Furqan node-whois index.coffee prototype pollution

Vendor Furqan
Product node-whois
Weakness CWE-74
Published December 19, 2022
Last update April 15, 2025

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file index.coffee. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). It is possible to launch the attack remotely. The name of the patch is 46ccc2aee8d063c7b6b4dee2c2834113b7286076. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216252.

Key dates

02Disclosure timeline

December 19, 2022 CVE published
April 15, 2025 Record updated