Lucene search
Veracode Vulnerability DatabaseVERACODE:37354HistorySep 30, 2022 - 7:47 a.m.
Prototype Pollution
2022-09-3007:47:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
hapi
hoek
prototype pollution
internals
clone
attacker
control
value
path
modify
attributes
0.002 Low
EPSS
Percentile
60.6%
@hapi/hoek is vulnerable to prototype pollution. The function internals.clone allows an attacker to get control of value of “path” and modify attributes such as __proto__, constructor and prototype.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @hapi/hoek | le | 9.0.2 | |
| @hapi/hoek | le | 9.0.2 |
Related
prion
prion
Design/Logic Flaw
2022-09-23 06:15:00
cvelist
cvelist
CVE-2020-36604
2022-09-23 05:28:11
github
github
hoek subject to prototype pollution via the clone function.
2022-09-25 00:00:27
nvd
nvd
CVE-2020-36604
2022-09-23 06:15:08
cgr
cgr
CVE-2020-36604 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2020-36604
2022-09-26 10:18:57
debiancve
debiancve
CVE-2020-36604
2022-09-23 06:15:08
cve
cve
CVE-2020-36604
2022-09-23 06:15:08
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-30 15:19:31
osv
osv
hoek subject to prototype pollution via the clone function.
2022-09-25 00:00:27
CVE-2020-36604
2022-09-23 06:15:08
ubuntucve
ubuntucve
CVE-2020-36604
2022-09-23 00:00:00
wolfi
wolfi
CVE-2020-36604 vulnerabilities
2024-06-28 15:21:31