Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27878
HistoryNov 13, 2020 - 3:14 a.m.

Prototype Pollution

2020-11-1303:14:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.012 Low

EPSS

Percentile

84.9%

field is vulnerable to Prototype Pollution. Failure to sanitize the field in the levelUp function and moveUp function allows for injection of arbitrary properties into existing construct prototypes and modification of attributes such as __proto__, constructor and prototype.

CPENameOperatorVersion
fieldeq0.0.1
fieldle1.0.1
fieldeq0.0.1
fieldle1.0.1

0.012 Low

EPSS

Percentile

84.9%