Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33869
HistoryJan 24, 2022 - 7:29 a.m.

Prototype Pollution

2022-01-2407:29:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.009 Low

EPSS

Percentile

83.2%

cached-path-relative is vulnerable to prototype pollution. The vulnerability exists due to a lack of sanitization for the key types, allowing an attacker to exploit the vulnerability by injecting arbitrary properties into existing construct prototypes and modify attributes such as __proto__, constructor and prototype via the cachedPathRelative function.