Prototype Pollution

2022-02-1708:32:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

litespeed.js

vulnerability

sanitization

state.js

prototype pollution

attacker

injection

construct prototypes

attributes

EPSS

0.018

Percentile

88.5%

JSON

litespeed.js is vulnerable to prototype pollution. The vulnerability exists due to a lack of sanitization for the key value in the state.js file which allows an attacker to inject properties into existing construct prototypes and modify attributes.