Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35157
HistoryApr 19, 2022 - 5:08 a.m.

Prototype Pollution

2022-04-1905:08:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
prototype pollution
madlib-object-utils
utils.js
validation
setvalue
arbitrary code execution
software

EPSS

0.001

Percentile

30.3%

madlib-object-utils is vulnerable to prototype pollution. The vulnerability exists in the utils.js due to lack of validation in setValue which allows an attacker to inject and execute arbitrary code

EPSS

0.001

Percentile

30.3%