Prototype Pollution

2022-07-2605:09:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

prototype pollution

js-ini

parse function

index.ts

parse.ts

lack of validations

malicious ini files

application security

EPSS

0.002

Percentile

57.1%

JSON

js-ini is vulnerable to prototype pollution. The vulnerability exists in parse function in index.ts and parse.ts due to lack of validations which allows an attacker to send malicious INI files on the application to cause a pollution on prototype.