Lucene search
Veracode Vulnerability DatabaseVERACODE:37292HistorySep 27, 2022 - 5:56 a.m.
Prototype Pollution
2022-09-2705:56:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22
express-xss-sanitizer
prototype pollution
require function
sanitize.js
arbitrary javascript
EPSS
0.001
Percentile
45.1%
express-xss-sanitizer is vulnerable to prototype pollution. The vulnerability exists in require function of sanitize.js because it doesn’t properly sanitize the user input data which allows an attacker to inject and execute arbitrary javascript.
Related
cnvd
cnvd
Express XSS Sanitizer prototype contamination vulnerability
2022-09-28 00:00:00
nvd
nvd
CVE-2022-21169
2022-09-26 05:15:10
osv
osv
express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute
2022-09-27 00:00:22
CVE-2022-21169
2022-09-26 05:15:10
cvelist
cvelist
CVE-2022-21169 Prototype Pollution
2022-09-26 05:05:11
prion
prion
Cross site scripting
2022-09-26 05:15:00
cve
cve
CVE-2022-21169
2022-09-26 05:15:10
github
github