Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36500
HistoryJul 26, 2022 - 5:46 a.m.

Prototype Pollution

2022-07-2605:46:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
ion-parser
vulnerability
prototype pollution
remote attacker
malicious payload
ini file
software

EPSS

0.003

Percentile

68.8%

ion-parser is vulnerable to prototype pollution. A remote attacker is able to pollute object creations by passing a crafted malicious payload to parse function via a crafted INI file.

EPSS

0.003

Percentile

68.8%

Related for VERACODE:36500