CVE-2020-8147
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using utils-extend.
Affected products
n/a · utils-extendReferences
https://hackerone.com/reports/801522