Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34780
HistoryMar 22, 2022 - 6:01 a.m.

Prototype Pollution

2022-03-2206:01:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
bodymen
vulnerability
handler function
index.js
prototype pollution
software

EPSS

0.001

Percentile

40.2%

bodymen is vulnerable to prototype pollution. The vulnerability exists in handler function in index.js because the properties of Object.prototype are not properly handled which allows an attacker to inject properties into existing construct prototypes and modify attributes sending a __proto__ payload.

EPSS

0.001

Percentile

40.2%

Related for VERACODE:34780