Lucene search
Veracode Vulnerability DatabaseVERACODE:37060HistorySep 16, 2022 - 8:32 a.m.
Prototype Pollution
2022-09-1608:32:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
steal.js
prototype pollution
optionname vulnerability
object modification
0.002 Low
EPSS
Percentile
59.4%
steal is vulnerable to prototype pollution. The optionName variable in main.js is not validated, allowing an attacker to modify object by accessing it through the ‘proto’ property of object.
Related
nvd
nvd
CVE-2022-37264
2022-09-15 16:15:10
cve
cve
CVE-2022-37264
2022-09-15 16:15:10
osv
osv
steal vulnerable to Prototype Pollution via optionName variable
2022-09-16 00:00:36
CVE-2022-37264
2022-09-15 16:15:10
github
github
steal vulnerable to Prototype Pollution via optionName variable
2022-09-16 00:00:36
prion
prion
Code injection
2022-09-15 16:15:00
cvelist
cvelist
CVE-2022-37264
2022-09-15 15:44:40
veracode
veracode
Prototype Pollution
2022-09-16 06:24:01