CVE-2020-7993

MEDIUM

Prototype 1.6.0.1 - Auth Bypass

Title source: llm

Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field.

Core 2

Core References

Third Party Advisory x_refsource_misc

Various Sources x_refsource_misc

CVSS v3 4.3

EPSS 0.0022

EPSS Percentile 44.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-862

Status published

Products (1)

prototypejs/prototype 1.6.0.1

Published Feb 03, 2020

Tracked Since Feb 18, 2026