Prototype Pollution

2022-05-0408:10:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

jsgui-lang-essentials

prototype pollution

ll_set function

software vulnerability

EPSS

0.003

Percentile

69.3%

JSON

jsgui-lang-essentials is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the ll_set function in the jsgui-lang-essentials.js and modify attributes such as __proto__, constructor, and prototype.