Lucene search
Veracode Vulnerability DatabaseVERACODE:29033HistoryJan 20, 2021 - 7:07 a.m.
Prototype Pollution
2021-01-2007:07:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.014 Low
EPSS
Percentile
86.4%
aws-sdk is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as __proto__, constructor and prototype.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aws-sdk | le | 2.813.0 | |
| @aws-sdk/shared-ini-file-loader | le | 1.0.0-rc.8 | |
| aws-sdk | le | 2.630.0 | |
| aws-sdk | le | 2.212.1 | |
| aws-sdk | le | 2.813.0 |
Related
osv
osv
CVE-2020-28472
2021-01-19 11:15:13
nvd
nvd
CVE-2020-28472
2021-01-19 11:15:13
github
github
prion
prion
Code injection
2021-01-19 11:15:00
cve
cve
CVE-2020-28472
2021-01-19 11:15:13
cvelist
cvelist
CVE-2020-28472 Prototype Pollution
2021-01-19 00:00:00
checkpoint_advisories
checkpoint_advisories