Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33291
HistoryDec 13, 2021 - 5:46 a.m.

Prototype Pollution

2021-12-1305:46:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
prototype pollution
comb
deepmerge
path
attributes
control
modify

EPSS

0.004

Percentile

72.2%

comb is vulnerable to prototype pollution. The function deepMerge() allows an attacker to get control of value of “path” and modify attributes such as __proto__, constructor and prototype.

EPSS

0.004

Percentile

72.2%

Related for VERACODE:33291