Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33973
HistoryJan 31, 2022 - 10:29 p.m.

Prototype Pollution

2022-01-3122:29:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
prototype pollution
vulnerable methods
validation bypass
attribute modification

EPSS

0.009

Percentile

82.7%

keyget is vulnerable to prototype pollution. The vulnerability exists in set and push methods of index.js because the validations are not handled properly which allows an attacker to inject properties into existing construct prototypes and modify attributes.

EPSS

0.009

Percentile

82.7%

Related for VERACODE:33973