Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27677
HistoryOct 27, 2020 - 2:53 a.m.

Prototype Pollution

2020-10-2702:53:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

40.8%

pathval is vulnerable to prototype pollution. The function parsePath allows an attacker to get control of value of “path” and modify attributes such as __proto__, constructor and prototype.

CPENameOperatorVersion
pathvalle1.1.0
pathvalle1.1.0

0.001 Low

EPSS

Percentile

40.8%