Prototype Pollution

2021-09-2804:28:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

aurelia-path

prototype pollution

url parameter

vulnerability

EPSS

0.002

Percentile

61.3%

JSON

aurelia-path is vulnerable to prototype pollution. An attacker is able to modify object class Object by tricking an application to parse the following URL: https://aurelia.io/blog/?__proto__[asdf]=asdf.

References

github.com/aurelia/path/commit/7c4e235433a4a2df9acc313fbe891758084fdec1

github.com/aurelia/path/issues/44

github.com/aurelia/path/releases/tag/1.1.7

github.com/aurelia/path/security/advisories/GHSA-3c9c-2p65-qvwv

www.npmjs.com/package/aurelia-path

EPSS

0.002

Percentile

61.3%

JSON

Related for VERACODE:32252