Prototype Pollution

2020-04-0310:42:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

61.8%

JSON

ini-parser is vulnerable to prototype pollution. An attacker is able to add and modify arbitrary properties via Object.prototype using a __proto__ payload.

CPENameOperatorVersion
ini-parserle0.0.2

CPE	Name	Operator	Version
	ini-parser	le	0.0.2

References

github.com/rawiroaisen/node-ini-parser/blob/master/index.js#L10-L14

github.com/rawiroaisen/node-ini-parser/blob/master/index.js#L14

0.002 Low

EPSS

Percentile

61.8%

JSON

Related for VERACODE:22935